A cyberattack on the Flexi Parking app caused a shutdown of the Selangor Intelligent Parking system, disrupting parking payments across 64 local councils nationwide starting June 30, 2026 [1, 2, 3]. The breach targeted the centralised Flexi Parking platform rather than the local Selangor SIP concessionaire [1, 3].
Key functions including parking fee payments, summons enforcement, monthly pass purchases, and credit top-ups were affected by the system outage [1, 4]. Due to the disruption, Selangor local authorities were instructed to suspend issuance of parking summons temporarily to avoid penalizing motorists during the downtime. "We are working hard on repairs, but the public will face problems paying for parking over these few days," said Ng Suee Lim, Selangor state local government committee chairman. "Because of this, we have officially requested all affected local councils not to summon motorists during this downtime" [1]. He also added, "It (Flexi Parking app) was hacked. Now they are trying to rectify (the issue). These two days motorists will have difficulty paying for their parking. So, we asked (the authorities) that no summons be issued for the next two days" [2].
The parking digital payment systems in both Selangor and Sabah were affected. Services were fully restored by July 2, approximately three days after the outage began [5, 4, 6]. The Smart Selangor Parking Facebook page announced, "Our app service has now resumed and is available as usual. You may now proceed with your parking payment" [6]. Similarly, the Flexi Parking operator posted on social media, "Our app service is now back online. Please be assured that every message received is not being ignored and is being reviewed progressively based on the required checking" [6]. Some users reported missing credit after the system was restored during recovery efforts [2, 7, 6].
Motorists were advised to use alternative parking payment apps while the Flexi Parking system was down [2]. The National Cyber Security Agency (Nacsa) and the Malaysian Communications and Multimedia Commission are investigating the cyberattack. Communications Minister Datuk Fahmi Fadzil said, "I will check with Nacsa whether a statement has been or will be issued. I will consult with them first on this issue" [5, 8, 9, 7].
The incident affected a total of 64 local councils nationwide, marking a significant disruption of digital parking services across Malaysia [1, 2, 3].
