JPDP to investigate alleged hacking incident on local Misi Rakyat website

JPDP said it has started an investigation into the incident after receiving the DBN form from the company on July 10. — Image by DCStudio on Freepik

PETALING JAYA: The Department of Personal Data Protection (JPDP) is investigating an alleged hacking incident on the Misi Rakyat website.

In a statement today (July 14), JPDP said details from the alleged incident have been uploaded by a hacker onto website BreachForum and messaging platform Telegram on July 3 and 4 respectively.

JPDP added that it has also received an incident report from Malaysia Computer Emergency Response Team (MyCert) under CyberSecurity Malaysia on July 4.

“On the same day, JPDP has contacted Bangsa Bertauhid Sdn Bhd (the company that owns and operates Misi Rakyat) to get a confirmation on the incident and to provide related data samples,” it said.

The company has also been instructed to conduct an internal investigation and submit a completed Data Breach Notification (DBN) form.

JPDP said it started an investigation into the incident after receiving the DBN form from the company on July 10. The website founder has also been called to JPDP to have a statement recorded on July 13.

JPDP is also working with CSM to conduct further investigations on whether there have been any breaches under the Personal Data Protection Act 2010 (Act 709).

Misi Rakyat is a fund-raising website where its founder claimed in an local media interview that the funds will be chanelled towards the needy. It has also launched its own food delivery app Misi.