The mySPR website was launched in 2019 and it has allowed people to register themselves as voters online. While it brought convenience to Malaysians, questions about cybersecurity matters have once again come into the spotlight after another data leak incident.
This time, a netizen alleged that the personal details of over 800,000 Malaysian voters, which are part of mySPR’s website were leaked and sold online.
According to Twitter user @acaiijawe, the database was sold on a famouse database marketplace and it contains selfies and National Registration Identification Cards (NRICs) of 802,259 Malaysian voters.
Camnelah hackers ni boleh dapat semua data Pengundi dari database SPR ni.— Faisal Rahim (@acaiijawe) November 9, 2022
Maklumat lengkap siap nama, IC, nombor telefon, email dan alamat. Tak cukup dengan tu, ada gambar IC dan selfie sekali!
Murah plak tu harganya 😭. Kasihan kita semua.
Harap ini semua palsu. pic.twitter.com/y9A107q1FT
In addition, information such as full name, ID number, e-mail address, birth date, hashed password, as well as full address was seen in the database.
Meanwhile, the seller claimed to possess the full electoral roll along with the details of 22 million Malaysian voters, putting it for sale at USD2,000 (≈RM9,000) in either Bitcoin or Monero cryptocurrencies.
According to lowyat.net, the listing was posted on the database marketplace since April and is the same seller involved in the leaking of the National Registration Department (JPN) database in May.
Police to investigate in the alleged dataleak
After the news went viral online, caretaker Prime Minister Ismail Sabri had called on the Election Commission (EC) to investigate the matter.
“As an independent agency, EC should investigate this,” Ismail said, reported NST.
However, caretaker Home Minister Datuk Seri Hamzah Zainuddin denied that claims of a data leak of voters’ information on social media are untrue.
He explained that this is because Election Commission (EC) only releases information such as the names and identity card numbers of voters.
At the same time, Hamzah also said that no police report was lodged so far but the police will launch an investigation into this matter.