THE personal details of three million MySejahtera users which were downloaded using a “super admin” account was part of a security measure against attempts to hack into the app, says Deputy Health Minister Lukanisman Awang Sauni.
“On the issue of data involving three million users, it was downloaded by the ‘super admin’ as a safety measure.
“When an attack occurs, the super admin carries out an administrative step to look at the data.
“I am unable to provide further explanation to the House as the matter is still under investigation by the police,” he told Datuk Dr Ahmad Hairi (PN-Kuala Langat).
Lukanisman acknowledged that there have been attempts to hack the MySejahtera app, but said no data leaks had occurred.
Dr Ahmad asked whether the data under the MySejahtera app was secure after the Auditor-General’s Report 2021 Series 2 revealed that there were 1.12 million attempts to hack the app with the information of about three million users reportedly accessed in a suspicious manner from the “super admin” account.
Dr Ahmad also asked whether the app would be used for the Madani Health Scheme to determine those from the B40 group who were eligible for the programme.
The scheme will see an allocation of RM120mil under Budget 2023 to provide a “credit” facility for the B40 group that allows them to see a general practitioner at private clinics without having to go to the Emergency Department of public hospitals.
On Feb 23, Communications and Digital Minister Fahmi Fadzil informed the House that Cyber Security Malaysia was ordered to investigate reports of personal data leakage of MySejahtera app users.
On a separate question by Dr Kelvin Yii (PH-Bandar Kuching), Lukanisman said the Cabinet would make a decision soon whether to convert MySejahtera into a super public health app.
He said the proposal was made in light of the impending government takeover of the app’s ownership from MySJS Sdn Bhd on March 31.
Lukanisman added that ownership of the app would include data, intellectual property, modules, brand and logo, and said the government would have full control and use of the app without any additional cost.
He said the government had agreed to make payments totalling RM160mil for the app which was made through direct negotiations between April 2021 and March 31 this year.
The MySejahtera app was initially developed by KPISoft Sdn Bhd under a corporate social responsibility agreement with the government.
The agreement was for the period between March 27, 2020, until March 31, 2021, without the government needing to make any payment for the app.
