maim.gov.my Listed by FunkSec Ransomware Group

On December 31, 2024, the Malaysian government body Majlis Agama Islam Melaka (MAIM) appeared on the leak site of the ransomware group Funksec. Internal files were allegedly exfiltrated during a ransomware attack on the organisation responsible for Islamic affairs in the state of Melaka.

What Public Reporting Shows

Available reporting describes MAIM as the Melaka Islamic Religious Council, a state government entity that manages religious education, mosque administration, zakat collection, waqf endowments and the enforcement of Islamic laws. The incident involved successful exfiltration of internal files, after which the data was listed for sale or public release on Funksec’s leak portal. Public reporting indicates the number of affected individuals remains unknown, and the precise volume or sensitivity of the stolen files has not been independently verified. The listing appeared on the final day of 2024, consistent with the group’s pattern of using leak sites to pressure victims.

Why This Matters for You and Your Family

When a government religious council is breached, the personal information of ordinary residents can be exposed. If you or your family live in Melaka, have registered for zakat, attended religious programmes, or interacted with mosque administration, your details may now sit in files controlled by criminals. Internal files often contain names, identity card numbers, addresses, contact information, financial records related to charitable contributions, and family details submitted for official purposes. Once such data leaves official custody, it can be sold, traded or used to target you with fraud, phishing or physical threats. Your family’s private religious and financial matters deserve protection; a breach like this removes that control.

The Doxxing and Identity-Chain Implications

Stolen government records rarely stay isolated. Criminals combine them with other leaks to build detailed profiles. A phone number from one file links to an email in another; an address ties to social-media accounts and children’s school records. These identity chains accelerate doxxing, enabling harassment, SIM-swapping or targeted scams. Credential leaks of this nature also cascade into account takeovers. Gaming accounts belonging to you or your children frequently reuse passwords or recovery emails tied to official records, turning a single breach into a chain of compromises across platforms.

Funksec’s Publicly Known Track Record

Public reporting attributes the attack to the ransomware group known as Funksec. The group emerged in 2024 and has targeted organisations across multiple sectors, listing victims on dedicated leak sites to enforce payment demands. Notable prior incidents involve mid-sized government bodies, healthcare providers and educational institutions. Their typical playbook begins with initial access through phishing or exploited vulnerabilities, followed by data exfiltration, encryption of systems where possible, and subsequent extortion via public leak threats. The group routinely sets payment deadlines and escalates by publishing samples or full datasets when demands are unmet.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity drawn from breach records.
• Rotate the password used on any Melaka government or religious-affiliated sites anywhere it is reused, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught and acted upon in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same personal details.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites while you focus on securing your own accounts.

The incident shows how quickly official records can move from government servers to criminal marketplaces. Taking concrete steps now limits what attackers can build from this and future leaks. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts. Start protecting what matters most before the next breach appears on another leak site.