It’s midnight at the time of writing, but I’m not burning the midnight oil by studying late. I came across a few X posts that kept me agitated this late at night.
You see, I can’t sleep thinking about how personal details of millions of Malaysians could be available to anyone with a few clicks.
Let me put it this way.
If you had roughly around RM245 to spare, what would you do? I for sure would spend it on the latest Spider-Man 2 game on Steam. But did you know that the same amount of money could buy you access to the private data of ordinary Malaysians?
A Website That Knows Too Much
That’s the reality of Caghi.com, a website that for years has allegedly sold personal information for as little as RM5. The price depended on how deep you wanted to dig. As the hypothesis suggests, the deeper you dig, the deeper the cash.
In truth, it’s just another chapter in the long story of the data leak happening in Malaysia, where personal details are treated like something you can bargain for online.
At the lower end, you could get someone’s name, IC number, or phone registration details. Pay more, and you’d be looking at addresses, business records, voter data, or even the three-digit CVV code on the back of a credit card.
This was not speculation. Journalists from Sinar Daily and Facebook users like Pendakwah Teknologi tested it and confirmed that the information was real.
One search could reveal not only your home address but also your neighbours’ details. The site even suggested related records if you looked up one individual, painting a map of their personal life that no one had agreed to share.
I’m not saying that they are lying, but I did go on the website and yes, everything that they said is sadly true.
Credit photo: Pendakwah Teknologi via Facebook.
Malaysians Are Number 1 … As the Highest Rate of Data Leaks
Caghi might sound like a rogue website, but it is a symptom of a larger problem. Malaysia is already recognised as the country with the highest rate of data leaks in Asia, according to Gogolook’s Whoscall 2024 report. The figures are sobering.
About 72.5% of Malaysians who checked their status found their data had been compromised. Scam calls jumped by more than 80% in a single year, and cyber fraud losses ballooned to RM1.57 billion in 2024.
These numbers matter because they show why Caghi hits such a nerve. It is not just about a dodgy site lurking on the internet, but about a pattern of weak protections that allow personal data to be abused again and again.
Although Caghi.com has reportedly been taken down, X users like Xavier Naxa pointed out that it remains accessible through a VPN. That means the information is still out there, still circulating, and still a risk.
For many Malaysians, this is what fuels the outrage.
And that’s the trouble with data leak problems in Malaysia. You can shut a site down, but the information rarely disappears. It just hides in another corner of the web.
Leaked Data Leads To Scam
And this is where the story bleeds into something bigger. A leak isn’t just about someone knowing your IC number or where you live. Once that information is out there, it fuels the very scams and fraud cases that have been bleeding Malaysians dry.
The 2025 State of Scams in Malaysia report by Gogolook and the Global Anti-Scam Alliance found that 85% of adults had encountered a scam, and nearly three-quarters actually fell victim.
On average, each victim lost about RM4,844, and the most common traps were the usual investment scams and phone calls that we face almost every day. The same ones, powered by the stolen personal details floating around sites like Caghi.com.
You’d be wrong to think that the elderly are the ones who make up the crop of scammed victims. Whoscall stated that millennials made up 78% of victims, and even children were caught up, with one in five parents saying their child between 7 and 17 had been scammed at least once.
WhatsApp, Telegram, and Facebook have become fertile hunting grounds, with 56% of scams now coming through messaging apps.
So the next time you get a call from an unknown number claiming to be J&T or the LHDN, knowing every detail, then you know where they got it from.
The Malaysian Government Is Putting All Eggs in One Basket
Netizens are also asking why such a website can operate for years without serious intervention. Others worry about what this means for new government initiatives such as the forgotten PADU and the upcoming MyDigital ID.
If trust is already this fragile, what happens when all our details sit under one roof?
This is not to say that consolidation itself is wrong. A digital identity can make life easier if done right. People question if the system secures the data well enough and whether it makes those protections clear.
The calls now are not for more apps or new systems, but for stricter enforcement of existing laws and stronger penalties for negligence.
The Communications Minister, the Malaysian Communications and Multimedia Commission, and the Department of Personal Data Protection are under pressure to show that this time will be different.
Speaking of the people from the Malaysian government, Home Minister Datuk Seri Saifuddin Nasution Ismail, and the Royal Malaysian Police (PDRM) responded quickly when news of a reported leak of 17 million MyKad records shook Malaysia at the end of last year.
This is after they confirmed that they found no evidence supporting claims of compromised sensitive personal data.
He, however, is still silent regarding this issue. So, is the issue real?
Citizens want proof that the promises of digital transformation can coexist with real protection. Otherwise, it’s only a matter of time before the next Malaysia data leak makes the headlines, and we start this conversation all over again.
It is one thing to worry about hackers from afar, another entirely to know that your personal information may already be available to anyone with RM245 (or even lower) and a search bar.
We lock our front doors every night, but what about the keys to our personal data?
Now, what should I do with the RM200+ that I have here in my hand?…
Featured image: Edited by Fintech News Malaysia based on an image by jcomp via Freepik.
