# MA-687.112017: MyCERT Alert - Best Practices on Safeguarding Personal Details

**Date:** 17 Nov 2017  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-687.112017  
**Advisory ID:** MA-687.112017

---

**1.0 Introduction**
MyCERT received information from trusted parties regarding websites that request users’ personal details to check the possibility of users’ credential compromised. Based on our checking, such sites are not bound to any data privacy rules or regulations. Therefore, the personal details released to such sites may not be well protected under existing data protection acts. Furthermore, some of the sites do not provide reliable information of valid administrative and ownership of the sites.
**2.0 Impact**
Personal details that users release to unknown or unreliable external parties, regardless of websites or through emails, may lead to information leak and the details may be manipulated for various malicious activities on the net.
**3.0 Recommendations**
• Users must ensure to verify the authenticity and reliability of websites that request personal details.
• Users must not respond to messages they receive through mobile phones that request their personal details.
• Take precautions on websites that circulate through mobile phone messages that contain untrusted links that request users’ personal details.
•
• Users must never share sensitive data and information with any unknown parties or websites.
• If users encounter any such websites that request personal details, they must be reported to relevant Law Enforcement Agencies.
• If you suspect your personal details have been leaked or manipulated for malicious activities, you need to lodge a police report at a nearby police station with evident.
• Avoid sharing personal details or private information on social networking sites, online instant messaging and SMS.
• Contact your respective Internet Service Provider and Law Enforcement Agency for further assistance, when required.
For further inquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#2d4e544f485f1414146d4e544f485f5e484e585f445954034054) or [[email protected]](/cdn-cgi/l/email-protection#3f52465c5a4d4b7f52465c5a4d4b11504d58115246)
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 -18:00 MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)