KUALA LUMPUR, Oct 18 – Five people have been arrested for their suspected involvement in a syndicate that hacked and stole 400 million personal data records of Malaysians before selling them on the Dark Web, police said.
Bukit Aman’s Commercial Crime Investigation Department (CCID) director Datuk Seri Ramli Mohamed Yoosuf said the suspects, aged between 34 and 52, were arrested during Op Kapas on Sept 5.
The suspects comprise four locals and one Pakistani national, who is believed to be the mastermind of the syndicate.
Ramli explained that the syndicate stole personal data by hacking into systems used by various companies and related agencies.
The stolen information, including names, identity card numbers, home addresses, bank account details and mobile phone numbers, was then uploaded to a portal known as Query Smart Search, he said.
“Access to this portal was rented out to interested individuals at a rate of RM200 to RM800 per month. Some data was also sold directly to buyers for between RM1.50 and RM2 per record,” he told a press conference Thursday.
Also present at the press conference were the Commissioner of the Malaysian Personal Data Protection Department, Prof Dr Mohd Nazri Kama, and CyberSecurity Malaysia chief technology officer Wan Roshaimi Wan Abdullah.
Ramli said the syndicate’s activities were initially detected by CyberSecurity Malaysia after monitoring a website, dataserver1.mypsx.net, containing user information believed to be registered with various companies and agencies.
He said most of the identified renters and buyers were unlicensed debt collection companies, and the authorities also believe that other syndicates may have used the services of this syndicate.
