Kuala Lumpur City Hall (DBKL) has been grappling with widespread online service disruptions since late April, and now, serious allegations have emerged suggesting that the city’s systems may have been the target of a major cyberattack. The incident has sparked public concern, parliamentary scrutiny, and mounting pressure on DBKL to provide a full and transparent explanation.
MP Tan Kok Wai Alleges Hacking and Ransom Demand
Cheras Member of Parliament (MP) Tan Kok Wai recently alleged that DBKL’s online infrastructure was compromised by hackers who demanded a staggering USD55 million (~RM236 million) in ransom. According to Tan, this information came from a highly reliable source, though not directly from Kuala Lumpur Mayor Datuk Seri Maimunah Mohd Sharif. Nonetheless, he stated he had sufficient reason to believe the claim was credible.
Tan questioned the prolonged service disruption, arguing that if it were a routine technical glitch, it should not have taken more than three weeks to resolve. "This clearly points to a more severe issue than has been publicly acknowledged," he remarked.
Concerns Over Public Data and Communication Breakdown
The MP further raised alarms over the potential compromise of public data. He highlighted that DBKL’s facial recognition system, used to enter its premises, has also failed. "Everyone now has to manually submit their details, which raises the risk of tens of thousands of personal data being leaked," he warned.
Tan also criticised the lack of communication from DBKL. He said he contacted the Mayor’s special assistant on 8 May requesting a meeting, but had not received any follow-up. "I’m not just bringing this up for political reasons. My constituency’s public facilities also need urgent attention. It has been ten days with no reply whatsoever," he said.
Other Members of Parliament have joined Tan in demanding answers. Seputeh MP Teresa Kok reported receiving public complaints over long queues at DBKL offices due to the digital outage. Meanwhile, Kepong MP Lim Lip Eng urged DBKL to issue a formal explanation about what has gone wrong with their systems.
Tan further noted that key internal meetings between MPs and the KL Mayor have not taken place. The last known consultation was on 15 April, and meetings scheduled for May have yet to occur. He expressed concern that DBKL’s usual governance processes may be disrupted due to the IT system failures.
Impacted Services and Alternative Measures
DBKL first notified the public of service disruptions on 28 April, posting a brief message on its official Facebook page. However, the lack of detailed updates since then has only added to public frustration.
The following DBKL services have been significantly affected:
- Assessment tax payment portal
- Rental payment portals for houses and market lots
- Compound fine payment portal
- eLesen (business licensing)
- Adu@KL (public complaints and feedback)
There have also been reports that email systems for some departments were temporarily inaccessible.
In a statement issued on 18 May, DBKL acknowledged the disruptions but stopped short of confirming any cybersecurity incident. The city hall said it has been working closely with the Malaysian Communications and Multimedia Commission (MCMC) and the National Cyber Security Agency (NACSA) to address the issues. They stated that systems began gradually recovering from 1 May and that full restoration is anticipated by 23 May.
To help maintain public services during the outage, DBKL has:
- Offered assistance through its official social media channels
- Shared regular updates on service recovery timelines
- Enabled some payments and licensing functions to resume in phases
Official Silence on Alleged Hack
Despite growing public and political pressure, DBKL has not acknowledged any hacking incident or ransom demand. This has left many wondering whether the authorities are withholding crucial information or if the breach is still under investigation.
Tan Kok Wai has called on Prime Minister Datuk Seri Anwar Ibrahim, Federal Territories Minister Datuk Seri Dr Zaliha Mustafa, and Mayor Datuk Seri Maimunah Mohd Sharif to break their silence and provide a detailed public briefing.
"The public has a right to know. DBKL cannot keep silent in the face of such a serious issue. It must take responsibility and assure citizens that their data and services are safe," said Tan.
A Crisis of Confidence
The incident has sparked a broader debate about cybersecurity readiness within public institutions. Questions are being raised about how DBKL safeguards sensitive data, how often its systems are audited, and whether it has robust contingency plans in place for cyberattacks.
Earlier in late March, Malaysia Airports was hit by a cyberattack and the government had called for the strengthening and investment in cybersecurity infrastructure to prevent similar incidents from happening.
Read: Malaysia Airports Hit By Cyberattack: Government Rejects RM44.4 Million Ransom Demand
While DBKL maintains that backup data remains intact and that recovery efforts are being conducted cautiously, the lack of direct answers has eroded public trust. The city hall has promised to investigate the root cause of the disruption and pledged to strengthen its ICT and cybersecurity frameworks moving forward.
Until the full truth is revealed, residents and lawmakers alike remain in the dark, anxious for transparency, accountability, and above all, assurance that such an event will not happen again.
*Sources: Visual and Reference Credits to Social Media & various cross-references for context.
FOMO much? Follow our Facebook and Instagram for more updates.