Tabung Haji Restores Systems After October 8 Cyberattack
Lembaga Tabung Haji (TH) has reactivated its core systems and services following a cyberattack on October 8 that forced a temporary suspension of operations across all channels. The agency confirmed that depositors’ savings remain secure, with recovery efforts involving comprehensive security checks, strengthened controls, and collaboration with national cybersecurity authorities.
The attack, described as a criminal act aimed at disrupting TH’s services and national stability, prompted an immediate shutdown to protect depositors’ personal data and funds. TH’s internal team, alongside external experts and agencies such as the National Cyber Security Agency (NACSA) and the Department of Personal Data Protection (JPDP), conducted investigations and implemented recovery measures. A police report was also filed.
Service Restoration Timeline:
- October 8: TH suspended all system operations.
- Yesterday: Branches in Kedah, Terengganu, and Kelantan reopened.
- Today: Branches nationwide resumed normal operations, along with services through strategic banking partners.
While most functions have been restored, three features on the THiJARI platform password resets, new user registration, and online account opening remain unavailable pending further recovery work. TH has assured ongoing monitoring and security enhancements to prevent future incidents.
Depositors with concerns or reports of unusual transactions are advised to contact the TH Contact Centre at 03-6207 1919. Updates will be provided via TH’s official channels.
Source: https://thecyberexpress.com/tabung-haji-cyberattack-systems-resume/
Tabung Haji cybersecurity rating report: https://www.rankiteo.com/company/tabung-haji
"id": "TAB1791801200",
"linkid": "tabung-haji",
"type": "Cyber Attack",
"date": "10/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Depositors',
'industry': 'Finance (Islamic Savings and Pilgrimage '
'Fund)',
'location': 'Malaysia',
'name': 'Lembaga Tabung Haji (TH)',
'type': 'Financial Institution'}],
'customer_advisories': 'Depositors advised to contact TH Contact Centre for '
'concerns or unusual transactions',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personal data and funds)',
'type_of_data_compromised': 'Personal data of depositors'},
'date_detected': '2023-10-08',
'date_publicly_disclosed': '2023-10-08',
'description': 'Lembaga Tabung Haji (TH) experienced a cyberattack on October '
'8 that forced a temporary suspension of operations across all '
'channels. The agency confirmed that depositors’ savings '
'remain secure, with recovery efforts involving comprehensive '
'security checks, strengthened controls, and collaboration '
'with national cybersecurity authorities.',
'impact': {'downtime': 'Temporary suspension of operations (October 8 - '
'present for some services)',
'operational_impact': 'Temporary suspension of all channels, '
'partial restoration of services',
'systems_affected': 'All system operations, THiJARI platform '
'(password resets, new user registration, '
'online account opening)'},
'investigation_status': 'Ongoing',
'motivation': 'Disruption of services and national stability',
'post_incident_analysis': {'corrective_actions': 'Strengthened controls, '
'ongoing monitoring, and '
'security enhancements'},
'references': [{'source': 'Tabung Haji Official Statement'}],
'regulatory_compliance': {'regulatory_notifications': 'Department of Personal '
'Data Protection '
'(JPDP)'},
'response': {'communication_strategy': 'Updates via official channels, TH '
'Contact Centre',
'containment_measures': 'Immediate shutdown of all system '
'operations',
'enhanced_monitoring': 'Ongoing monitoring and security '
'enhancements',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes (police report filed)',
'recovery_measures': 'Gradual restoration of services (branches '
'and banking partners)',
'remediation_measures': 'Comprehensive security checks, '
'strengthened controls, collaboration '
'with cybersecurity authorities',
'third_party_assistance': 'National Cyber Security Agency '
'(NACSA), Department of Personal Data '
'Protection (JPDP), external experts'},
'stakeholder_advisories': 'Collaboration with NACSA and JPDP, police report '
'filed',
'title': 'Tabung Haji Cyberattack',
'type': 'Cyberattack'}