Not Just Data Theft: NACSA Warns Cybercriminals Could Target M’sia’s Water, Electricity & Healthcare Systems
by Kyan Koh · WORLD OF BUZZThe nature of digital threats is evolving into something far more disruptive to everyday society.
The National Cyber Security Agency (NACSA) has issued a critical warning that cybercriminals are shifting their focus beyond mere data theft, increasingly aiming to cripple public infrastructure and disrupt the daily lives of everyday citizens.
Targeting critical infrastructure: Water, healthcare, and energy systems at risk
Bernama reported that, NACSA Chief Executive Officer Dr Megat Zuhairy Megat Tajuddin highlighted that Malaysia is not immune to these escalating threats, particularly regarding industrial control systems across vital sectors like healthcare, water supply, energy, and national supply chains.
Citing recent high-profile incidents in Europe, where cyberattacks successfully paralysed supermarket operations and blood bank refrigeration systems, Dr. Megat Zuhairy emphasised that modern attacks are deliberately engineered to cause widespread chaos in basic public services.
“Its capability has increased the scale, speed, and intensity of cyberattacks worldwide, and Malaysia, like other countries, is not exempt from the risk of facing the same modus operandi,” Dr. Megat Zuhairy told Bernama, noting that advancements in Artificial Intelligence (AI) allow threat actors to launch automated, simultaneous attacks on multiple organisations.
He added that operational technology (OT) systems within strategic sectors remain highly vulnerable if directly connected to the internet without proper defense mechanisms.
What organisations and the public can do
In response to these growing threats, NACSA urges all National Critical Information Infrastructure (NCII) entities to isolate critical operating systems from external networks and continually update their service continuity plans.
From a regulatory standpoint, entities are bound by the Cybersecurity Act 2024 (Act 854) to comply with rigorous security standards. Meanwhile, non-NCII organizations are guided by NACSA’s cybersecurity threat preparedness frameworks.
Addressing the National Security Council’s (MKN) recent decision to raise the National Cyber Security Threat Level (NCTL) from Low to Medium, Dr. Megat Zuhairy clarified that the adjustment is a proactive precaution rather than an indicator of an active national crisis.
“Cybersecurity is a shared responsibility, and every individual can contribute by practicing proper security measures and refraining from spreading unverified information,” he reminded.
He added that OT systems within strategic sectors remain highly vulnerable if directly connected to the internet without proper defense mechanisms.
NACSA urges system protection
To counter sophisticated intrusions, NACSA strongly urges NCII entities to isolate critical operating systems from external networks and continually update their service continuity plans.
“No system is completely immune to attacks, but preparedness and rapid recovery capabilities can reduce the impact of an incident on the public,” Dr. Megat Zuhairy stated.
To bolster national defenses moving forward, the government and industry stakeholders must prioritise rapid threat intelligence sharing, local talent development, and AI-assisted technological monitoring. Furthermore, regular incident simulations and exercises are essential, alongside the establishment of the Cyber Security and Cryptology Development Centre (CSCDC) under NACSA to enhance national technical expertise and cybersecurity capabilities.
How do you protect your personal data from evolving online threats? Share your cybersecurity tips in the comments below!