THE Inland Revenue Board (IRB) today denied a report on the alleged illegal sale of data on millions of people on a well-known online marketplace, adding that all information in its possession is safe.

Lowyat.net reported that a seller alleged the database apparently belongs to the National Registration Department (NRD) and it contained 4 million records obtained from the IRB’s website through the application programming interface made for myIdentity, the data sharing platform for government agencies.

“Internal investigation revealed that no data breach had taken place as alleged.

“The IRB is also working with the NRD, the National Cyber Security Agency and the National Security Council to look into the allegation,” it said.

The tax authority also said that all data and information in its possession were safe and securely protected.

“The IRB regrets the report and the allegation as it can erode the confidence of the people, especially taxpayers on the security of their data and information,” it said.

The IRB said it was also not ruling out the possibility that this was done by “irresponsible” people with the intent to confuse and fool the people.

It also said it was a user of myIdentity and was not the owner of it.

The seller alleged the database contained a lot of important information such as full names, IC numbers, postal addresses, mobile numbers, and email addresses.

It was also said to contain images which were being grouped according to one’s birth year, which ranges from 1979 to 1998.

Meanwhile, Bukit Aman Commercial CID director Kamarudin Md Din said the police are working to identify the culprits and block the alleged attempt.

Kamarudin also did not rule out the possibility of an inside job. – September 28, 2021.