A person who carried out cyberattacks on government department networks, private online service providers and private digital payment systems has been arrested, according to reports.
As part of efforts to develop the e-Government system, authorities are identifying cybercriminals who illegally access, use, disrupt, disclose, publish or distribute information, cyber resources and critical information infrastructure without authorization, and are taking effective action against them in accordance with cybersecurity laws.
In 2026, government department networks, private online service providers and some private digital payment systems were subjected to cyberattacks. The attackers reportedly threatened to expose users’ personal information online and demanded money in exchange for returning the stolen data. Following investigations to identify and arrest those responsible, Wai Phyo Aung, also known as Aung Myo, was arrested on September 10, 2026, for carrying out the cyberattacks.
Investigations found that the suspect allegedly carried out cyberattacks to illegally obtain data from multiple organizations and websites. In the first week of June 2026, he allegedly accessed information from student accounts at an international college based in Myanmar and data from a Myanmar-based job-search website. In the second week of June, he allegedly obtained student information from a foreign university based in Myanmar. In the second week of July, he allegedly accessed data from a vehicle-rental brokerage website. In the second week of August, he allegedly obtained information from a telecommunications website and the website of a private digital payment system. In the first week of September, he allegedly accessed data from a government online service website. Investigators found that he allegedly threatened to withhold the stolen data unless money was paid and threatened to publish personal information online.
The government is working to develop the e-Government system. Such cyberattacks, including the illegal acquisition of personal information, extortion for the return of stolen data and threats to disclose personal information online, have had a significant impact on the development of the government’s e-Government system, as well as national security and stability. Authorities are therefore taking legal action against the arrested suspect, Wai Phyo Aung, also known as Aung Myo, for the alleged cybercrimes.
The government has urged anyone with information about individuals planning cyberattacks against national information infrastructure, private online service providers or private digital payment systems to report it confidentially to the relevant security agencies. It also warned that further action would be taken against those responsible for cyberattacks on online services under the e-Government system, theft of government and citizens’ information through cyberattacks, extortion for the return of stolen data, and the online distribution of illegally obtained national security-related or personal information accompanied by threats.
