Tabung Haji restores services after cyberattack disrupts depositor accounts

Tabung Haji confirmed that a criminal cyberattack targeted its systems, prompting a temporary halt of services on Oct 8 after suspicious activity was detected on Oct 7. The fund filed reports with police, the National Cyber Security Agency and the personal data protection department, and collaborated with external specialists to investigate and remediate the breach. Comprehensive security checks and strengthened controls allowed core operations to resume, and physical branches in Kedah, Terengganu and Kelantan reopened on Sunday, with other branches following today.

Services through its strategic banking partners are also back online. The official portal THiJARI and its mobile app have restored most functions, but password resets, new user registrations and online account openings remain unavailable until further recovery measures are completed. Tabung Haji apologized to depositors for the disruption and pledged ongoing monitoring and enhanced security.