SayaKenaHack.com only provides information, does not allow data download


  • Nation
  • Saturday, 18 Nov 2017

PETALING JAYA: SayaKenaHack.com did not breach Section 130 of the Personal Data Protection Act 2010 (PDPA), says the Bar Council cyber law and information techno­logy committee.

The committee’s co-chairman Foong Cheng Leong said the website was merely a platform for users to check whether their personal data had been leaked or breached.

“Currently, the Malaysian Communications and Multimedia Commission (MCMC) is blocking the website for breaching Section 130 of the PDPA for unlawful collection of personal data.

“If the website allows people to download the personal data of others, then it will be a violation of PDPA.

“But it merely provides information on whether a user’s identity card number, or other form of personal data, has been breached.

“Therefore, the website did not violate the PDPA,” he said when contacted yesterday.

SayaKenaHack.com was created by IT expert Keith Rozario to help the public verify if they were part of a data breach that affected some 46.2 million mobile phone subscribers. He denied allegations that it was a phishing website to obtain MyKad numbers.

Foong said the onus was on MCMC to prove whether the website’s creator had been collecting the personal data of users.

“He may or may not have committed an offence, but MCMC has to prove it first,” he added.

Meanwhile, the Association of Banks in Malaysia (ABM) said the commercial banking industry takes a serious view of fraud prevention, and remains vigilant in managing risks relating to such acts.

ABM was addressing concerns regarding unscrupulous people exploiting the leaked personal data to apply for a credit card or bank loan.

An ABM representative said the association’s member banks have strengthened and intensified their identity verification procedures.

“Other specific precautionary measures may vary from bank to bank depending on their internal risk management requirements,” said the representative in an e-mail interview.

In a statement, Maxis Bhd urged its customers to exercise precaution and be on guard against scam e-mails and phone calls.

Similarly, Digi encouraged its customers to be mindful of potential risks of sharing or validating information from unverified sources.

On Oct 19, technology news portal lowyat.net reported that an individual had attempted to sell the information of the 46.2 million subscribers for an undisclosed amount of Bitcoin.

The data breach, said to be one of the largest ever in Malaysia, is believed to have happened in 2014.

Article type: metered
User Type: anonymous web
User Status:
Campaign ID: 1
Cxense type: free
User access status: 3
Subscribe now to our Premium Plan for an ad-free and unlimited reading experience!

Courts & Crime , data breach , lowyat , telcos

   

Next In Nation

Negri pilot project to offer land to second-generation Felda settlers
Cops nab five teens for breaking into two Gelang Patah schools to steal
Civil-military cooperation the focus of joint US-Esscom exercise
Court sets Nov 1 to hear RM1bil matrimonial property claim from Jamaludin Jarjis' widow
KJ: With GEG law, no need for harm reduction for those born after 2007
Melaka cops seeking culprits behind fake kidnapping messages
Pos Bihai Orang Asli cautious after new tiger footprints found
Kelantan Bomba identifies 595 flood hotspots
Third rubbish trap, costing RM600,000, to be built along Sungai Skudai
Two NGOs get order to extend interim stay of development at Bukit Cherakah

Others Also Read