KUALA LUMPUR: A cyber incident at a Health Ministry facility involved unauthorised access to a file storage and sharing platform but did not disrupt healthcare services, the ministry said.
A preliminary investigation by the ministry’s Computer Security Incident Response Team found that the incident did not involve encryption of its main databases.
The incident occurred on Nov 12 and was limited to a supporting file storage and sharing platform at one of its facilities.
“The incident was limited to unauthorised access to a supporting file storage and sharing platform at a ministry facility,” it said in a statement.
As an immediate containment measure, public access to the platform has been blocked.
The ministry said it had also put additional security controls in place at the facility, including resetting user passwords, auditing servers and enforcing multi-factor authentication.
“The ministry confirms that all main operating systems as well as health services and patient treatment are not affected and are operating as usual.
“The public may continue with health appointments and treatment at ministry facilities without any worry,” it said.
The ministry said it would continue working closely with the National Cyber Security Agency, in line with the Cyber Security Act 2024, and carry out continuous monitoring.
“The ministry issues a stern warning that downloading, possessing or spreading official government documents obtained illegally is a serious offence subject to legal action,” it added.
It said it remained committed to keeping its information technology infrastructure secure and the public’s health data confidential.
The statement comes after the government raised the National Cyber Threat Level from low to moderate on Nov 4.
(
On Nov 3, Prime Minister Datuk Seri Anwar Ibrahim told the Dewan Rakyat that Malaysia was among countries considered potential targets of cyberattacks.