Bank Rakyat, one of Malaysia's major banks, had several pages of its website defaced on the night of Friday 6 November 2026, including the login page for its iRakyat online banking service. Visitors saw a black page carrying the message "MARLANWG IS HERE" from an actor using that name.

The defaced pages were taken down and the bank said late that night that its corporate website was temporarily unavailable, directing customers to its mobile apps and digital banking channels. The site was restored within about an hour of the first reports, according to Pokde.Net.

The actor claimed to have reached the bank's internal systems and taken a sample of data. That claim has not been independently verified, and Bank Rakyat has not confirmed whether any customer data was accessed. The bank's own statement, carried by RTM on 7 November, did not use the word hack: it said the disruption touched only its corporate website and was caused by a technical problem in a third-party service provider's system, and that customers' personal data, banking details and savings were not affected.

Malaysia's Communications Minister Fahmi Fadzil said in Doha on 7 November that the third-party-managed website had been hacked and defaced, but that no data was stolen and online banking was not disrupted. The bank blocked access to the affected server and directed users to the iRakyat site it owns.

Prime Minister Anwar Ibrahim has ordered a wider review of cybersecurity safeguards across government assets, banking institutions and government-linked companies, run by the National Cyber Security Agency and the National Security Council. The matter was discussed at the Cabinet meeting on 6 November.

Bank Rakyat says banking continues as normal through iRakyat, BRICK, QR2E and i-bizRAKYAT.