Personal details of an undisclosed number of Malaysians have been breached and are put up online for sale.The leaked database contains data from jobstreet.com, an online portal of Malaysian Medical Council (MMC), the Malaysian Medical Association (MMA) an
Personal details of an undisclosed number of Malaysians have been breached and are put up online for sale.The leaked database contains data from jobstreet.com, an online portal of Malaysian Medical Council (MMC), the Malaysian Medical Association (MMA) and the Malaysian Dental Association (MDA).In addition to that, the database of Malaysian telcos and mobile virtual operators(MVNO) has also been compromised which leads to the breach of personal details of 46.2 million Malaysians which include phone numbers, customer details, sim card information like unique IMEI and IMSI numbers.
You may be interested in reading:10 Key Information Security Mistakes Organizations Make! How to Fix Them?It was discovered by Lowyat.net, a technology news site when some tried to sell a database containing personal details of Malaysians on Lowyat forums.In the report published by Lowyat, the Jobstreet database contains 17 million rows of information like customer name, login name, hashed passwords, email id, nationality, address and handphone number. It also includes details of nonresident Malaysians also.The leaked database of Malaysian Medical Association contains over 20,000 records and the Malaysian Medical Council database contains around 62,000 records which include details like name, IC numbers, address and mobile numbers.
You may be interested in reading:Personal Records of 31.6 Million South Africans BreachedBased on the data available the breach may have happened between 2014-15.The Malaysian Communications And Multimedia Commission (MCMC) has been alerted about the issue and has started the investigation on this.Lowyat.net said that “The MCMC is following up with the relevant agencies to determine the source of the breach, but we now believe that the data was already being traded online much earlier than we first estimated. Based on the condition of the files that we obtained, we are quite certain that it has already changed hands more than once.”They also said that all the recovered data is currently encrypted and stored in a single location and will be destroyed by Friday, 3 November at 12 pm. The data owners can contact them if they need the leaked database.
Read more on :Australian Defence Data Leaked in an Extensive Cyber Attack
About the Author
[/lgc_column][lgc_column grid="85" tablet_grid="75" mobile_grid="75" last="true" style="background-color: #ffffff;"]Ashique is a self motivated and passionate security analyst with a good knowledge in computer networking, security analysis, vulnerability assessment and penetration testing. [/lgc_column]