Bank Rakyat iRakyat Pages Defaced on 6 Nov; MARLANWG Claims Attack
A group called MARLANWG defaced Bank Rakyat's iRakyat pages on 6 Nov; the bank has not confirmed whether customer data was accessed.
What happened1/6 Bank Rakyat website disrupted on the night of 6 November 2026
On the night of 6 November 2026, Bank Rakyat's website was disrupted. Lowyat reports say several pages, including the iRakyat login screen, had their display changed.
A group calling itself MARLANWG posted a claim of responsibility. Bank Rakyat has not yet confirmed whether this was a cyber attack or whether any customer data was accessed.
The site was later restored. Users reported getting back online through the address www2.
The real numbers2/6 What is confirmed and what is still unknown
6 Nov 2026night of disruptionMARLANWGgroup claiming responsibilitywww2URL used to restore accessThe disruption hit Bank Rakyat's public-facing pages. Editor Mohd Fadli Salleh confirmed that, as of 7 November, only Bank Rakyat was affected and the site had been restored. Other banks remain safe so far.
The critical open question: was this defacement only (changing what visitors see) or did the intruder reach internal systems and access customer records? Bank Rakyat has not stated either way.
- 01/03
6 Nov 2026 night of disruption What is confirmed and what is still unknown night of disruption
How it affects your wallet3/6 ATM withdrawals: money deducted from account but cash did not come out
During the same window, users on social media reported a frightening ATM problem: the machine deducted money from their account but dispensed no cash. Reports came from Bank Rakyat, BSN, CIMB and Maybank ATMs.
One user described waiting through two mechanical sounds at a Bank Rakyat ATM, expecting a large payout, only to get the correct RM500 on the second try. Another said a BSN withdrawal at an RHB ATM showed a receipt but the money never left the machine.
Paynet, the national payment switch, was also reported to be having problems during the same period.
Mohd Fadli Salleh's assessment: the ATM glitches appear tied to the Bank Rakyat disruption and Paynet slowdown, not a separate breach of every bank. Other banks are still operating normally.
Bank / service Reported issue Status per editor (7 Nov) Bank Rakyat iRakyat pages defaced; ATM cash not dispensed Restored via www2 BSN / CIMB / Maybank ATM deducted money, no cash out Not confirmed as affected Paynet Payment switch slow or down Reported issues same period What to do, step by step4/6 What to do if you bank with Bank Rakyat or use ATMs this week
- Check your balance through the official Bank Rakyat mobile app, not a browser link sent by SMS or WhatsApp. If the app is down, use the www2 web address the bank directed users to.
- If an ATM deducted money from your account but gave no cash, keep the receipt (or photograph the screen) and call your bank's customer line the same day. Do not leave it for weeks.
- Do not click any link that claims to be a 'Bank Rakyat security update' or 'iRakyat password reset' sent by SMS, email or WhatsApp. Type the official address yourself or open the app.
- Keep a small cash buffer (e.g. RM200–RM300) for 24–48 hours in case ATM or QR-payment services are slow again. This is a precaution, not a panic move.
- If you suspect your account was accessed, call your bank immediately and report to the National Scam Response Centre on 997.
- 02/03
What is confirmed and what is still unknown ✓group claiming responsibility MARLANWG group claiming responsibility
Why it matters5/6 Your deposits are protected, but the data question is still open
Malaysian bank deposits are covered by PIDM (Perbadanan Insurans Deposit Malaysia) up to its published limit. If a bank fails, eligible depositors are compensated. PIDM protection covers deposit balances; it does not cover a data breach or identity theft.
The bigger risk here is not your balance disappearing. It is whether personal details (name, account number, contact info) were exposed. Bank Rakyat has not yet said whether any data was accessed. Until they do, treat any unexpected call or message referencing your account as suspicious.
The scope of the intrusion—defacement only versus internal system access—remains unconfirmed. That distinction matters: a defaced login page tricks people into typing passwords; a breached database exposes records without the customer doing anything.
What to watch6/6 What to watch for in the next few days
Bank Rakyat has not yet issued a public statement on whether customer data was accessed or what MARLANWG actually reached. A clear statement on the scope of the incident is the next thing to look for on kwsp.gov.my's partner notices, Bank Rakyat's own channels, or Bank Negara Malaysia's announcements.
If Paynet issues persist beyond 7 November, interbank transfers and ATM networks across multiple banks could be affected. Watch for a Paynet or BNM advisory.
No court date, penalty or regulatory action has been announced yet. Do not act on unverified social-media claims about which banks are 'next'.
- 03/03
Monthly statement ATM withdrawals: money deducted from account but cash did not come out Bank Rakyat Restored via www2 BSN / CIMB / Maybank Not confirmed as affected Paynet Reported issues same period
Questions people ask
Is my money in Bank Rakyat safe after the 6 Nov disruption?
As of 7 Nov, the site is restored and the editor confirms only Bank Rakyat was affected. Deposits are covered by PIDM up to its limit. The open question is data access, not whether balances vanish. Check your balance via the official app and report anything unusual to the bank.
An ATM took my money but gave no cash. What do I do?
Keep the receipt or screenshot. Call your bank's hotline the same day to raise a dispute. If you suspect fraud, also call the National Scam Response Centre at 997. Do not share your OTP or account number with anyone who calls you.
Who is MARLANWG?
MARLANWG is the name of the group that posted a claim of responsibility for the Bank Rakyat page defacement on 6 Nov 2026. No verified identity or motive has been confirmed by authorities or the bank.
