Public section

Breaches and Incidents

Confirmed breaches and security incidents, who is affected and what remains unknown.

Monitored dailyPublication requires deterministic evidence gates.

Published only

Latest in Breaches and Incidents

Breaches and Incidents Verified Officially confirmed

Advisory on Data Breach Prevention

National Cyber Security Agency (NACSA) is aware of the recent incidents of data breaches involving personal data of citizens in this region.

Checked 31 Jul 2026 1 evidence record View alert
Breaches and Incidents Verified Officially confirmed

Highly Elusive Attackers Leverage SolarWinds Supply Chain to Compromise Victims With SUNBURST Backdoor

A recent breach involving a cybersecurity firm FireEye has uncovered a widespread campaign by an uncategorised advanced persistent threat actor tracked as UNC2452 by FireEye. The actors behind this campaign have gained access to numerous public and private organisations around the world via trojanised updates to SolarWinds’ Orion IT monitoring and management software.

Checked 01 Aug 2026 1 evidence record View alert
Breaches and Incidents Verified Officially confirmed

Best Practices on Data Breach Prevention

In the light of the current threat landscape in Malaysia, National Cyber Coordination and Command Centre (NC4), would like to urge all organisations both public and private sectors to take immediate actions in implementing stronger cyber security measures and perform due diligence to ensure that systems and networks are adequately protected against unauthorised data access.

Checked 01 Aug 2026 1 evidence record View alert
All published intelligence loaded