Tabung Haji restores main services after cyber attack, some Thijari functions still down
Tabung Haji (TH) has brought its main systems and services back online, after temporarily suspending them last week following suspicious cyber activity. The pilgrimage fund said this comes after it carried out a full security check, strengthened its controls and took steps to restore its systems.
In its latest statement dated 12 October 2026, TH also confirmed for the first time that the disruption was caused by a cyber attack on its systems. To protect depositors’ savings and personal data, the fund had halted operations across all of its channels on 8 October.
Lembaga Tabung Haji (TH) memaklumkan bahawa sistem dan perkhidmatan utama telah kembali beroperasi selepas pemeriksaan keselamatan menyeluruh, pengukuhan kawalan dan langkah pemulihan sistem dilaksanakan. Pendeposit yang mengesan sebarang transaksi atau perkara luar biasa pada akaun mereka diminta segera memaklumkannya kepada TH. Bagi sebarang pertanyaan, keraguan atau bantuan, sila hubungi Pusat Perhubungan TH (THCC) di 03-6207 1919. TH merakamkan penghargaan atas kesabaran, kerjasama dan sokongan pendeposit sepanjang tempoh pemulihan ini serta memohon maaf dan amat kesal atas apa yang telah berlaku, namun ia terpaksa dilakukan demi keselamatan simpanan pendeposit. Keselamatan simpanan dan kepentingan pendeposit kekal menjadi keutamaan TH.
— Tabung Haji (@Tabung_Haji) October 12, 2026
Since then, TH says its internal teams have been working with external experts and national cyber security authorities to investigate the incident, deal with the threat and restore its systems. The fund described the attack as a criminal act against TH and the country, and has lodged a police report. It has also reported the matter to the National Cyber Security Agency (NACSA) and the Personal Data Protection Department (JPDP).
As for what’s available now, TH branches in Kedah, Terengganu and Kelantan reopened on Sunday, 11 October, while branches in all other states resumed operations today. Services offered through TH’s partner banks are also back up and running. However, at the time of writing, the Tabung Haji service is still unavailable on the Maybank banking app.
Meanwhile, things aren’t fully back to normal on the THiJARI app just yet. While most of its functions have been restored, password resets, new user registrations and online account opening remain unavailable, as these require further recovery work before they can be reinstated. TH says it will share updates through its official channels.
If you’re a TH depositor, it’s a good idea to check your account for any unusual transactions. Should you spot anything out of the ordinary, TH is urging depositors to report it immediately. You can reach the TH Contact Centre (THCC) at 03-6207 1919 for any questions or assistance.
Read more of our articles below!
