National Cyber Security Agency (NACSA) is aware of the recent incidents of data breaches involving personal data of citizens in this region.
Information leakage, information loss, service disruption and integrity of information compromised.
For the past several months, NACSA has seen multiple data breach incidents involving citizen personal data in Malaysia as well as within the South East Asia region, with the most recent case happened in Singapore which affected more than 1.5 million personal data including health details of Singapore Prime Minister.
While there's no party has claim responsibility for any of the previous incidents, the Cyber Security Agency of Singapore (CSA) and the Integrated Health Information System (IHIS) have revealed that recent attack on SingHealth is a deliberate, targeted and well-planned cyberattack that could very well have been a state-sponsored attack, which specifically and repeatedly target the details of Singapore Prime Minister personal and outpatient medical data.
Therefore, in the wake of this event, organisations are urged to take the necessary actions to protect clients' and stakeholders' personal data accordingly and adhere to Personal Data Protection Act (PDPA) 2010 and/or Official Secret Act (OSA). Organisations are reminded to always be vigilant in order to avoid from becoming a victim of these incidents.
All operating systems, web servers, databases & online services.
Organisations and Security Operation Centres (SOCs) are required to take the following actions:
Source : National Cyber Coordination and Command Centre (NC4) Official Website