THE Padu registration should be suspended until all security flaws are fixed, DAP strategist Ong Kian Ming said today. 

The former deputy minister had also yesterday revealed that anyone could create an account under the name of another person using easily accessible information, such as the full name and MyKad number, thus blocking the actual person from signing up. 

The Padu database launched by Prime Minister Anwar Ibrahim yesterday is for the rollout of targeted subsidies for fuel and other staples. 

“Sadly, the Padu database, as it stands, will not be useful in achieving this objective,” Ong said in a statement. 

He noted that those who are currently receiving government aid such as Bantuan Tunai Rahma but are not eligible to because they have other non-taxed income such as rent will not fill in accurate information in Padu. 

Ong also said aome users including him are wondering about many unfilled columns as Padu was supposed to have consolidated data a number of ministries and government agencies, including the Inland Revenue Board, EPF, Perkeso, Road Transport Department, and ICU. 

He noted that Economy Minister Rafizi Ramil had replied on X that this information was not displayed because of security concerns over possible hacking into Padu’s servers.

“But if some of this information is already available via government ministries and agencies, why does Padu need the user to fill up this information?

“What if the information supplied is not the same as what is found in Padu’s database? How does Padu verify the other information which is supplied by the user such as rental income from land or property?,” he asked. 

Ong also reiterated about the “major security issue with the registration of Padu” for those with the IC number and the postcode associated with the IC address of a user can register for the Padu account for that person, without having to go through the E-KYC process. 

“I did this with the IC address and postcode of four of my DAP colleagues who are ministers or deputy ministers, namely (Hannah) Yeoh Tseow Suan, (Steven) Sim Chee Keong, Liew Chin Tong and Teo Nie Ching

He said he was able to change some of the details of the academic qualifications and occupation of Yeoh without having to go through the e-KYC verification. 

“I would strongly recommend for the cabinet to make a collective decision to suspend the registration of Padu users until the security issues can be solved. 

“The system should be properly stressed test before it is rolled out again. Users who have registered but have not undergone the e-KYC verification should be asked to register again after the security issues have been resolved,” Ong said. 

He also recommended that the number of fields of information should be decreased and with security features are in place, the information which can be pulled from other agencies and ministries should be pre-filled as much as possible. 

“The user should have a mechanism where he or she can make a report if the information provided is not accurate. IT and cybersecurity experts should be called in to provide value-added inputs which can be used to improve the design of the Padu system.

“I hope that my former colleagues in cabinet will not see this as a move to undermine their governing objectives. In highlighting these flaws in the Padu system, I hope that they can be quickly rectified before the next parliamentary sitting so that the opposition parties in Perikatan Nasional will not have the opportunity to make this into a point of political debate.” – January 3, 2024.