Malaysia Health Ministry Cyber Breach: File-Sharing Platform at One Facility Accessed, Main Systems Unaffected

Malaysia's Ministry of Health (KKM) says an intruder got into a support file storage and sharing platform at one of its facilities, in an incident detected on Thursday, 12 November. Its statement, carried by Bernama late on 14 November, says all main operating systems and patient services were unaffected. KKM has not named the facility or said what the platform held.

What the ministry has said

An initial check by the ministry's own incident response team, CSIRT KKM, found that the ministry's main databases had not been encrypted. The ministry hasn't said whether any files were copied from the platform.

At the affected facility, public access to the platform has been blocked, user passwords reset, servers audited and multi-factor authentication made mandatory. KKM is working with the National Cyber Security Agency (NACSA) under the Cyber Security Act 2024 (Act 854).

The statement also warns that downloading, possessing or distributing official government documents obtained unlawfully is a serious offence that may lead to legal action. It doesn't say whether any such documents are circulating.

A leak-site claim, not confirmed

On the day the incident was detected, the Panzer ransomware group listed the Ministry of Health Malaysia on its leak site, threat-monitoring site DeXpose reported, with the message "The full leak will be published unless Ministry representatives engage with us." The listing gives no data size or sample. KKM's statement does not mention the group, and nothing published so far ties the claim to this incident.

Other attacks on Malaysian bodies this month

The incident follows disruptions at several unnamed financial institutions confirmed by the National Security Council on 7 November, and a suspected attack on the Election Commission's website during the Melaka polls.

What patients are told

RTM reports that the public need not worry and can keep their health appointments and treatment. KKM asked people to stay calm and not speculate.