Tabung Haji Restores Core Services After Cyberattack, Depositors' Savings Confirmed Safe

Malaysia's Tabung Haji has restored its key systems and services after a temporary suspension following a cyberattack detected on 7 October 2026. The fund said depositors' savings are safe and notified police, NACSA and JPDP. Some THiJARI functions, including password resets and new registrations, remain unavailable.

• Tabung Haji detected suspicious cyber activity on 7 October 2026 and suspended services
• Branches in Kedah, Terengganu and Kelantan reopened on 11 October, others on 12 October
• Depositors' savings confirmed safe, with enhanced monitoring and security controls
• THiJARI password resets, new registrations and online account opening still offline