Bahasa Melayu← Malaysia Cyber Watch
Tabung Haji suspends all services after a cyberattack
Lembaga Tabung Haji (TH) suspended its systems and services across all channels on 8 October 2026 after detecting suspicious cyber activity. Key services returned on 12 October, and TH says depositors' savings are safe.
Key facts
- OrganisationLembaga Tabung Haji (TH), Malaysia's pilgrimage fund and savings body.
- What happenedTH detected suspicious cyber activity on 7 October and suspended services on all channels on 8 October as a precaution. TH later described the event as a cyberattack.
- Systems affectedBranches, services through partner banks and the THiJARI app were down. On 12 October, THiJARI password resets, new user registration and online account opening were still being restored.
- Not affectedTH says depositors' savings are safe. On 8 October it said savings and personal data remained safe and secure.
- Cause or entry pointTH has not said how the attackers got in or who they are. No group has publicly claimed the attack in the sources we checked.
- AuthoritiesTH lodged a police report and notified the National Cyber Security Agency (NACSA) and the Personal Data Protection Department (JPDP). It also worked with CyberSecurity Malaysia.
Timeline
- 7 Oct 2026TH detects suspicious cyber activity on its systems. The Star
- 8 Oct 2026TH suspends system and service operations across all channels and says savings and personal data remain safe. The Star · Malay Mail
- 11 Oct 2026Branches in Kedah, Terengganu and Kelantan reopen. Malay Mail · The Star
- 12 Oct 2026Branches in other states reopen, partner bank services return and most THiJARI functions resume. Three THiJARI functions still need restoration work. Malay Mail · The Star
Incident record
| Organisation | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|
| ✅ ConfirmedLembaga Tabung HajiKuala Lumpur | 8 Oct 2026 | Finance | Intrusion | None | Confirmed. Services suspended for four days after suspicious activity. Police, NACSA and the data protection department notified; savings and data said to be safe. | Malay Mail · The Star✓ 7 Nov |
What to do
- Check your TH balance and recent transactions in THiJARI or at a branch, and call the TH Contact Centre on 03-6207 1919 if anything looks wrong.
- Take updates only from TH's official website and social media accounts. Do not act on calls or messages that claim to be from TH and ask for your login details or a transfer.
- If you lose money to a scam call or message, call the NSRC hotline on 997 straight away and make a police report.
- If you believe your personal data was misused, you can complain to the Personal Data Protection Department (JPDP).
FAQ
Is my Tabung Haji money safe after the cyberattack?
TH says depositors' savings are safe. It asks anyone who sees an unusual transaction to call the TH Contact Centre on 03-6207 1919.
Was Tabung Haji data stolen?
TH has not reported any data theft. On 8 October it said savings and personal data remained safe, and it notified the Personal Data Protection Department.
Is THiJARI working again?
Most THiJARI functions resumed on 12 October 2026. Password resets, new user registration and online account opening still needed restoration work at that time, and TH said it would post updates on its official channels.
Related stories
- Bank Rakyat website defacement Malaysia · 6 Nov 2026
- Amadeus airline data breach South Korea, Japan, Hong Kong +3 · 4 Nov 2026
- Rakuten Trade halts Bursa trading after a cyber attempt Malaysia · 30 Oct 2026
- Port of Tanjung Pelepas halted by a cyber incident Malaysia · 10 Sep 2026
Checked 7 Nov 2026. Methodology · Data CC BY 4.0