Tabung Haji Restores Systems After October 8 Cyberattack Lembaga Tabung Haji (TH) has reactivated its core systems and services following a cyberattack on October 8 that forced a temporary suspension of operations across all channels. The agency confirmed that depositors’ savings remain secure, with recovery efforts involving comprehensive security checks, strengthened controls, and collaboration with national cybersecurity authorities. The attack, described as a criminal act aimed at disrupting TH’s services and national stability, prompted an immediate shutdown to protect depositors’ personal data and funds. TH’s internal team, alongside external experts and agencies such as the National Cyber Security Agency (NACSA) and the Department of Personal Data Protection (JPDP), conducted investigations and implemented recovery measures. A police report was also filed. Service Restoration Timeline: - October 8: TH suspended all system operations. - Yesterday: Branches in Kedah, Terengganu, and Kelantan reopened. - Today: Branches nationwide resumed normal operations, along with services through strategic banking partners. While most functions have been restored, three features on the THiJARI platform password resets, new user registration, and online account opening remain unavailable pending further recovery work. TH has assured ongoing monitoring and security enhancements to prevent future incidents. Depositors with concerns or reports of unusual transactions are advised to contact the TH Contact Centre at 03-6207 1919. Updates will be provided via TH’s official channels.