Malaysia's Health Ministry confirmed early on June 27 that its official website, www.moh.gov.my, was hacked and taken offline [1, 2, 3, 4, 5, 6].
The incident was first detected just after 2 a.m. local time, when a screenshot showed the site’s landing page replaced with a message reading "HACKED BY MUSHR00W" alongside phrases linked to the hacking collective Anonymous: "We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us." [1, 2, 3, 6].
As of June 27, the site remains inaccessible to the public [1, 2, 3, 4, 5, 6]. Authorities have not disclosed if any data was compromised during the attack [6].
The ministry urged the public to avoid visiting the compromised website and warned against clicking suspicious links or downloading files from it. It advised users to follow updates only through official ministry social media channels [2, 3, 4, 5, 6]. In a Facebook post, the ministry said, "Do not click on any suspicious links or download any files from the site. We apologise for the inconvenience and will provide an update as soon as we can." [2]
Officials said a full investigation is underway and that they are cooperating closely with related agencies to restore the website and enhance its security to prevent further incidents. The ministry stated, "We are working closely with the relevant agencies to strengthen the security of the system and prevent a recurrence." [3]
The ministry added, "Data security and the delivery of public services remain our priority" [4]. It also apologized for the disruption and pledged regular updates as recovery efforts proceed [6].
The timeline of the incident began with the hacking detected around 2:11 a.m. on June 27, followed by the ministry’s public confirmation and warnings later that day, and ongoing investigation activities involving multiple agencies [1, 2, 3, 4, 5, 6].
