Malaysia Clarifies Data Leak Origins, Reinforces Cybersecurity Measures Kuala Lumpur, June 21 Malaysia’s National Security Council (NSC) has confirmed that recent claims of a personal data leak circulating on social media stem from cybersecurity incidents reported before 2022, not from any current platform. The data, believed to have been unlawfully obtained through prior cyber intrusions, is now being redistributed without authorization across online platforms. The National Cyber Security Agency (NACSA) emphasized that sharing or accessing such illegally obtained information regardless of where the service is hosted violates Malaysian law. In response, NACSA, alongside MyNIC and the Personal Data Protection Department, has taken swift action, including collaborating with foreign service providers to block and remove the implicated websites. A digital forensic investigation, led with the Royal Malaysia Police, is underway to identify and prosecute those responsible. The incident has prompted renewed calls for stronger legislation. The upcoming Cyber Crime Bill, slated for parliamentary review, proposes stricter penalties for cyber offenses, including unauthorized system access, data theft, and identity fraud. Meanwhile, the Cyber Security Act 2024, effective since August 2024, mandates that National Critical Information Infrastructure entities adopt robust protection measures, such as risk assessments and security audits, to bolster national cyber resilience. Separately, the NSC clarified that MyDigital ID with over 16 million registrations does not store personal data but serves as an identity verification platform, authenticating users directly with the National Registration Department. Its integration across government and private-sector services, including banking and telecommunications, aims to enhance digital transaction security and mitigate identity theft risks. The government reiterated its commitment to securing Malaysia’s digital transformation, with NACSA and the NSC positioned to address emerging cybersecurity threats.