KUALA LUMPUR, Oct 17 — Five people have been arrested for their suspected involvement in a syndicate that hacked and stole 400 million personal data records of Malaysians before selling them on the Dark Web, said the police.
Bukit Aman’s Commercial Crime Investigation Department director Datuk Seri Ramli Mohamed Yoosuf said the suspects, aged between 34 and 52, were arrested during Op Kapas on September 5.
The suspects comprise four locals and one Pakistani national, who is believed to be the syndicate's mastermind.
He said the syndicate stole personal data by hacking into systems used by various companies and related agencies.
The stolen information, including names, identity card numbers, home addresses, bank account details, and mobile phone numbers was then uploaded to a portal known as Query Smart Search.
“Access to this portal was rented out to interested individuals at a rate of RM200 to RM800 per month. Some data was also sold directly to buyers for between RM1.50 and RM2 per record,” Ramli said during a press conference today.
Also present were the Malaysian Personal Data Protection Department's Commissioner Prof Mohd Nazri Kama and CyberSecurity Malaysia's chief technology officer Wan Roshaimi Wan Abdullah.
He added that the syndicate's activities were initially detected by CyberSecurity Malaysia after monitoring a website, dataserver1.mypsx.net, containing user information believed to be registered with various companies and agencies.
Most of the identified renters and buyers were unlicensed debt collection companies, and the authorities also believe that other syndicates may have used the services of this syndicate.
The Pakistani national was charged on Friday (October 11) with two counts under Section 130(4) of the Personal Data Protection Act 2010 for selling personal data and could be punished under Section 130(7) of the same Act.
“The 47-year-old entered Malaysia as a general worker about 10 years ago but is believed to have been involved in hacking for about a year,” he said.
The other four suspects, three believed to be unlicensed debt collectors, were released on police bail.
— Bernama
