Form RCI to probe personal data theft, Harapan says

The government should establish a royal commission of inquiry (RCI) to probe all cases of personal data theft in the country over the past five years, Pakatan Harapan communications director Fahmi Fadzil said today.

In addition, he also urged the prime minister to get all ministries and government agencies to conduct cyber security audits to identify and secure loopholes in the cyber sphere that could enable hackers to steal people’s personal data.

"It’s a national cyber security threat that cannot be just set aside. This is the fourth huge-scale data theft reported this year alone, and it is expected that more than 25 million sets of personal data have been stolen so far this year.

"Apart from setting up an RCI and strengthening the country's cyber security, the prime minister should also provide an explanation on this breach in the upcoming Parliamentary sitting," Fahmi (above) said on Facebook.

He was responding to a recent report in Sinchew Daily that a hacker group calling themselves “Gray Hat” had sent a letter to Putrajaya, claiming it had access to large volumes of personal data of civil servants and MPs.

The group had threatened to make the stolen data available for sale from Sept 19, if the government does not respond to them.

Attack on country's leadership

The police said that they are in the midst of collecting further information from the National Audit Department, which lodged a report on the matter, and any further developments will be duly informed to the media.

Elaborating, Fahmi said the latest cyber-attack was not only against civil servants but the country's leadership as well.

He added that the Finance Ministry and Communications and Multimedia Ministry should consider imposing a fine, or a more deterrent sentence against database handlers who fail to secure the data under their care, as well as provide a form of compensation for victims of personal data thefts.

"This is to send a clear message that all those who handle personal data will be held responsible if the data under their care is compromised and the victims will receive justice.

"Given that three out of four personal data theft cases in the country this year involve government agencies, it is time for the government to amend the Personal Data Protection Act 2010 to not exempt the federal and state governments from the application of the law.

"The amendments should take into account the main points noted in the Public Consultation Paper No. 01/2020 which was published on Feb 14, 2020, and all parties, including the opposition, should be consulted before it is presented in Parliament next month.

"Personal data is the country's asset and treasure. It has to be protected at all costs,” said the Lembah Pantai MP.

Meanwhile, Communications and Multimedia Minister Annuar Musa said the National Cyber Security Agency (Nacsa) had been tasked to investigate and take action on the breach.

He added that the Prime Minister's Department will assist the agency on the matter.

"Action is being taken. Let us wait for the digital forensic analysis.

"Only Nacsa can issue a statement on this," the New Straits Times quoted him saying.

Cabinet agrees to amend two communications acts

Telegram accounts hacked: Users tricked to give passwords - experts

MP calls for PDPA amendment after iPay88 data breach

Beware of 'MySejahtera Covid-19 cash aid' SMS scam