Bank Rakyat‘s websites were reportedly defaced in a suspected cyberattack late on 6 November, prompting the bank to temporarily restrict access to its corporate website.
Lowyat.NET reported that several of the bank’s webpages, including the iRakyat online banking login page, were defaced in an attack claimed by a threat actor using the name MARLANWG.
Bank Rakyat subsequently confirmed that its corporate website was temporarily inaccessible due to a technical issue involving a third-party service provider.
In a statement posted on 7 November, the bank said the disruption was limited to its corporate website and that customers’ personal data, banking information and savings remained safe.
The cooperative bank said its banking systems and operations continued to function normally.
Customers were advised to use alternative digital channels, including the iRakyat website and mobile app, BRICK, QR2E and the i-bizRAKYAT business banking portal while restoration work was underway.
Bank Rakyat’s statements did not explicitly confirm a cyberattack or mention the reported defacement.
The National Cyber Security Agency (NACSA), through its National Cyber Coordination and Command Centre, was monitoring developments involving several financial institutions, according to Lowyat.NET.
Earlier BNM penalties
The incident comes after Bank Negara Malaysia (BNM) imposed a RM1 million penalty on Bank Rakyat on 20 January 2026 over cybersecurity and customer information protection breaches.
The central bank announced the enforcement action on 1 April.
BNM linked the penalty to an earlier incident in which an external threat actor gained unauthorised access to the bank’s IT infrastructure.
It found that Bank Rakyat had failed to meet requirements under its Risk Management in Technology (RMiT) policy document.
In June 2025, BNM also imposed a RM2.85 million penalty on Bank Rakyat over separate breaches linked to repeated service disruptions between June 2023 and December 2024, as well as weaknesses in its response and recovery processes.
Bank Rakyat said it would provide further updates on the corporate website disruption as they arise.
Featured image credit: Edited by Fintech News Malaysia, based on image by ramstudio via Magnific
