Tabung Haji restores core system operations after cyberattack; depositors' savings remain safe
Lembaga Tabung Haji has resumed operations of its main systems and services after a temporary suspension following a cyberattack on 8 October. The recovery includes the reopening of branches and the reactivation of key service channels, although some THiJARI functions are not yet fully available.
Highlights
- Tabung Haji has restored core system operations and reopened branches nationwide after strengthening security controls.
- THiJARI platform functions are back in operation except password resets, new user registration and online account opening, which are still undergoing recovery.
- Following the cyberattack on 8 October, Tabung Haji is working with security authorities and external experts to investigate the incident and has reported it to the police and relevant agencies.
This article was translated from the original. Read the original version by our correspondent here.
System recovery and service reopening
According to The Edge Malaysia, the reactivation of key systems and services was carried out after comprehensive security reviews, strengthened controls and system recovery measures were implemented.TH branches in Kedah, Terengganu and Kelantan resumed operations on Sunday, while branches in other states opened as usual on Monday. Services provided through strategic banking partners were also reactivated.
TH stressed that depositors' savings remain safe, while close monitoring and security enhancements continue to ensure that the restored systems and services operate safely and smoothly.
At the same time, all THiJARI platform functions are back in operation except password resets, new user registration and online account opening. TH stated that these three functions still require further recovery work before they can be reactivated, with updates to be communicated through the agency's official channels from time to time.
Follow-up measures after the cyber incident
On 8 October, TH temporarily suspended system operations and services across all channels to protect depositors' savings and personal information after a cyberattack caused service disruptions.Following the incident, TH said its internal team was working with external experts and national cybersecurity authorities to investigate the incident, address the threat and restore its systems. The agency also described the attack as a criminal act against TH and the country intended to disrupt its services, and filed a police report as well as notifying the National Cyber Security Agency and the Personal Data Protection Department.
TH also urged depositors who detect any unusual transactions, or who require assistance or have enquiries, to immediately contact the TH Contact Centre at 03-6207 1919. The agency also expressed its appreciation to depositors for their patience, cooperation and support throughout the recovery period, and apologised for the incident.
In our earlier report on Fortesys Holdings Bhd's planned IPO on the ACE Market, we explained how the company intends to raise funds to expand its AI and cybersecurity portfolio and strengthen its technical and sales capabilities. The article also detailed the share offering structure and use of IPO proceeds for operational expansion, including a network operations centre in Puchong, the opening of a sales office in Johor, and the development of proprietary AI-based solutions.