Tabung Haji Restores Services After October 8 Cyberattack, Confirms Depositor Funds Safe
Malaysia’s pilgrimage savings agency resumed operations after security checks, confirming that all depositor funds remain secure following the incident.

Key points
- Tabung Haji resumed key systems after comprehensive security checks and control strengthening.
- The agency confirmed that all depositor savings and personal information are safe.
- A police report was lodged, and national cybersecurity authorities assisted in the recovery.
Malaysia’s national pilgrimage savings agency, Tabung Haji, has resumed its core services following a cyberattack that disrupted operations on October 8. The agency confirmed that all depositor funds remain secure and that systems have been restored after thorough security assessments.
According to The Cyber Express, Tabung Haji issued a statement confirming the reactivation of its services. The agency stated that this decision followed comprehensive security checks, the strengthening of internal controls, and specific system recovery measures. These steps were taken to ensure that the reactivated services can operate safely and securely for users.
Context of the Disruption
The cyberattack occurred on October 8, prompting Tabung Haji to temporarily suspend system and service operations across all channels. The agency described this suspension as a necessary measure to protect depositors’ savings and personal information from further exposure or damage during the incident.
Tabung Haji characterized the event as a criminal act against both the agency and the nation. The stated intent of the attackers was to disrupt the agency’s services. Following the initial breach, internal teams collaborated with external experts and national cybersecurity authorities to investigate the scope of the event and address the threat.
Impact on Operations and Users
The suspension affected all channels initially, halting normal transactions and access. However, the agency emphasized that the primary goal was to safeguard the financial assets and data of its depositors. The involvement of national cybersecurity authorities helped reinforce system security before services were brought back online.
Branches have reopened, and the agency continues to monitor its systems closely for any anomalies. A police report has been lodged regarding the incident. The agency maintains that the savings of all depositors are safe, aiming to restore confidence among users who rely on the agency for pilgrimage savings.
What should you do?
Users who interact with Tabung Haji services should verify that they are accessing official channels. The agency advises continued monitoring of personal accounts for any unauthorized activity. While systems are back online, users should remain vigilant and report any suspicious behavior to the agency or relevant authorities immediately.
What to do and how to stay safe: Tabung Haji
- Verify that you are accessing official Tabung Haji websites or branches to avoid phishing attempts.
- Monitor your account statements and balance regularly for any unauthorized transactions or discrepancies.
- Change your login credentials if you suspect your account may have been compromised during the outage.
- Report any suspicious emails or messages claiming to be from Tabung Haji to the agency or local cyber authorities.
Step-by-step guide: Social Engineering Warning Signs and How to Respond
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Are my savings with Tabung Haji safe after the cyberattack?
Yes, Tabung Haji has confirmed that all depositor savings are safe and secure following the incident.
When did the Tabung Haji cyberattack occur?
The cyberattack that led to service suspension occurred on October 8.
Has Tabung Haji reported the cyberattack to the police?
Yes, the agency has lodged a police report regarding the criminal act against its systems.


