Doing taxes online has become increasingly popular due to its convenience and ease of use. With online tax filing, taxpayers can easily and securely submit their tax returns from the comfort of their own homes. Additionally, online tax filing is often faster than traditional paper filing. But as with everything online, there are flaws that can be exploited.
Malay Mail reports that yesterday, Malaysians reported on social media that they could access registered taxpayers’ personal information on the MyTax website by entering the person’s MyKad number.
The exposed information included details such as addresses and phone numbers. Following the complaints, the MyTax website was taken offline and later restored with the security flaw fixed, according to news reports.
In response, the Inland Revenue Board (LHDN) issued a statement to say that it was taking the complaint seriously and was actively working to address it in order to maintain taxpayers’ trust in their administration.
Also, the LHDN emphasised that the MyTax platform’s security measures ensured the confidentiality of taxpayers’ data and that it was protected by recognized data protection technology.
However, the tax agency didn’t provide details about the specific protection measures in place, nor did it explain how the alleged vulnerability allowed access to taxpayer information using only a MyKad number.