KUALA LUMPUR, Nov 15 — All major operational systems, as well as the Ministry of Health’s (MOH) healthcare and patient treatment services, remain unaffected and are operating as usual following a cybersecurity incident detected on Thursday (Nov 12).

MOH said in a statement posted on Facebook yesterday that the public can continue with healthcare appointments and treatment at its facilities without cause for concern.

The ministry said the incident was limited to unauthorised access to a support file storage and sharing platform at one of its facilities.

“An initial investigation by MOH’s Computer Security Incident Response Team (CSIRT) found that the incident did not involve the encryption of the ministry’s main databases,” the statement said.

The ministry said it immediately blocked public access to the platform to contain the incident and introduced additional security measures at the affected facility, including user password resets, server audits, and mandatory multi-factor authentication (MFA).

Under the Cyber Security Act 2024 (Act 854), the ministry will continue working closely with the National Cyber Security Agency (Nacsa) to address the incident and monitor continuously to safeguard cybersecurity.

Meanwhile, MOH advised the public to remain calm and refrain from speculation.

“MOH strongly warns that downloading, possessing or distributing official government documents obtained unlawfully constitutes a serious offence and is subject to legal action,” it said.

The ministry also reaffirmed its commitment to maintaining the highest level of security for its information technology infrastructure and protecting the confidentiality of the public’s health data. — Bernama