LHDN denies data leak involving 4 million Malaysians

The Inland Revenue Board (LHDN) has denied the leak of personal data belonging to millions of Malaysians through a government platform under the purview of the National Registration Department (JPN), saying all data and information in its care is protected by recognised security technology.

In a statement, it said an internal investigation had found no such leak, adding that the agency is working with JPN, the National Cyber ​​Security Agency and the National Security Council to review all possibilities in connection with the claim.

“For your information, LHDN is only a user and not the owner of the myIDENTITY system,” it added.

Earlier today, an IT expert claimed on Twitter that the personal data of four million Malaysians being kept by JPN was apparently put up for sale online for about RM35,000.

Adnan Shukor also shared a screenshot showing the seller offering the data leaked through LHDN.

The tax agency is one of 10 government bodies on a shared platform called myIDENTITY where data from JPN is shared.

According to the screenshot, a total of 32GB of data in 19 files contain the information of those born between 1979 and 1998, with details such as addresses, mobile numbers and photographs, as well as race, religion and MyKad identification numbers.

LHDN said it regretted the claim which it added could erode public confidence in the security of their information and data.

It also warned the public to be cautious about such claims and not to reject the possibility that they were made by irresponsible parties with the intention of confusing and lying to the people.