Tabung Haji services back following cyberattack

Tabung Haji (TH) has resumed operations following a cyberattack detected on Oct 7, reassuring depositors that their savings are safe.

The pilgrims’ fund said it had filed reports on the incident with the police, National Cyber Security Agency and personal data protection department.

“TH regrets the cyberattack on its systems, which disrupted services for depositors. Our core systems and services have resumed operations following comprehensive security checks, strengthened controls and system recovery measures.

“Close monitoring and enhanced security measures will continue to ensure that the systems and services brought back online operate safely and smoothly,” it said in a statement.

TH also said the attack was a criminal act against it and the country, aimed at disrupting its operations and services.

TH suspended its services from Oct 8 as a precaution after detecting suspicious cyber activity on Oct 7. It also apologised to depositors for the service disruption.

TH said its internal teams had worked with external experts and national cybersecurity authorities to investigate the incident, address the threat and restore its systems.

It said its branches in Kedah, Terengganu and Kelantan resumed operations on Sunday while branches in other states reopened as usual today. Services through TH’s strategic banking partners have also resumed.

For THiJARI, TH’s official online portal and mobile application, all functions have resumed except password resets, new user registrations and online account openings.

“These three functions require further recovery measures before they can be reactivated. Updates will be communicated through TH’s official channels,” TH said.