MySejahtera

HEALTH Minister Datuk Seri Dr Dzulkefly Ahmad denies allegations that a data breach involving 3.2 million MySejahtera users took place in April.

He explained that the Ministry of Health (MOH) alongside relevant agencies has conducted investigations and found no evidence of unauthorised access or any leak of personal data from the MySejahtera platform.

“There was no such incident involving a breach of 3.2 million users’ data as claimed,” he said in a parliamentary written reply.

Dr Dzulkefly added that the ministry is committed to protecting the integrity and security of health data and is continuously working to enhance its cyber security measures.

“These efforts are in accordance with General Circular No 4 of 2022, which outlines procedures for managing cyber security incidents within the public sector,” he added.

He was replying to Datuk Azman Nasrudin (Perikatan Nasional [PN]-Padang Serai), who had asked about the progress of the Malaysian Communications and Multimedia Commission’s (MCMC) investigation into the alleged data breach.

On June 7, an online portal reported that MCA president Datuk Dr Wee Ka Siong has criticised the government’s move to collect detailed phone call and Internet usage records from telecommunication companies (telcos), saying it violates the public’s right to privacy.

He added that such detailed data is unnecessary for policymaking in the ICT and tourism sectors, despite the MCMC’s explanation.

“This is not a question of whether we trust in the current government or not. The question is, why does the government want to collect such detailed information on its citizens?” he said on a Facebook post.

In February 2023, the Auditor-General’s 2021 Report (Series 2) tabled in Parliament revealed that millions of MySejahtera users’ personal data were compromised after a vaccine administration account improperly accessed and stole information from three million recipients.

The breach occurred between Oct 28 and Oct 31, 2021, using five separate IP addresses. — TMR