The dark web is a hidden part of the internet where anonymity and privacy are prioritised, making it an attractive marketplace for criminals looking to sell stolen personal data. Personal data such as usernames, passwords, social security numbers, credit card details, and even medical records can be found on the dark web. This data is often obtained through data breaches, phishing scams, or malware attacks.
Malaysia is no stranger to hacking or data breaches incident, with the most recent one involving a well-known credit counselling and management agency, AKPK, where they reported that personal information of around 20 customers, including their names and MyKad numbers, was published on the dark web following a breach in its IT system on 30 March.
Malay Mail reports that Teo Nie Ching, the deputy minister of the Communications and Digital Ministry, has stated that the majority of personal data being sold on the dark web is not genuine, according to an article in Mingguan Malaysia, the Sunday edition of Utusan Malaysia.
The article reported that most of the personal data offered for sale on the dark web was used for ransomware purposes, extorting money from companies looking to recover their data.
Teo acknowledged that the accuracy of the data cannot be verified and cited an example of fake data created by students for testing programmes at five universities. Recently, Utusan Malaysia reported that the personal data of Malaysians obtained from various government and private organisations were being auctioned on the dark web for prices ranging from RM4,400 to RM45,000.
Teo stated that her ministry is working on amending certain provisions in the Personal Data Protection Act 2010 to address gaps in the law and stay current with technological advancements and global privacy law developments.
