KUALA LUMPUR – All major operational systems, as well as healthcare and patient treatment services under the Health Ministry, remain unaffected and are operating as usual following a cybersecurity incident detected on Thursday (Nov 12).
The Health Ministry (MOH) said in a statement posted on Facebook today that members of the public could continue with their healthcare appointments and treatment at its facilities without concern.
The ministry said the incident was limited to unauthorised access to a support file storage and sharing platform at one of its facilities.
"An initial investigation by MOH’s Computer Security Incident Response Team (CSIRT) found that the incident did not involve the encryption of the ministry’s main databases,” the statement said.
The ministry said it had immediately blocked public access to the platform to contain the incident and introduced additional security measures at the affected facility, including resetting user passwords, conducting server audits and making multi-factor authentication (MFA) mandatory.
Under the Cyber Security Act 2024 (Act 854), the ministry will continue working closely with the National Cyber Security Agency (NACSA) to address the incident and continuously monitor its systems to safeguard cybersecurity.
Meanwhile, MOH advised the public to remain calm and refrain from speculation.
"MOH strongly warns that downloading, possessing or distributing official government documents obtained unlawfully constitutes a serious offence and is subject to legal action,” it said.
The ministry also reaffirmed its commitment to maintaining the highest level of security for its information technology infrastructure and protecting the confidentiality of the public's health data. –BERNAMA