Cyber attack shuts down Selangor’s digital parking payment system

SELANGOR motorists will not have to pay for public parking or worry about receiving parking summonses after a major cyberattack crippled the state's digital parking payment system, forcing authorities to temporarily suspend both payment and enforcement while recovery efforts are under way.

The emergency shutdown of the Selangor Intelligent Parking (SIP) platform was triggered after hackers targeted data transaction systems linked to the nationwide Flexi Parking network, disrupting parking payment services across 64 local authorities throughout the country.

Selangor local government and tourism committee chairman Datuk Ng Suee Lim said the system was taken offline immediately to protect the integrity of user data and allow forensic investigations and technical recovery work to proceed.

"We are working hard on repairs, but the public will face problems paying for parking over these few days," he told reporters after visiting the newly opened Stadium Shah Alam LRT station.

"Because of this, we have officially requested all affected local councils not to summon motorists during this downtime."

The temporary waiver follows confirmation by SIP concessionaire Rantaian Mesra Sdn Bhd (RMSB) that enforcement officers have been instructed not to issue parking compounds while the digital platform remains unavailable.

Ng rejected suggestions that the security lapse originated from RMSB, saying the cyberattack was directed at the centralised Flexi Parking platform, which recently took over the management of parking payment services for numerous local authorities, including major Selangor councils such as Shah Alam, Subang Jaya and Selayang.

"This issue is not about the SIP private concessionaire," Ng emphasised, adding that the transition to the nationwide Flexi Parking platform was responsible for the widespread disruption affecting multiple states.

The Flexi Parking application is used to facilitate digital payments for on-street parking, off-street parking and parking compound.

Ng said the cyberattack, which occurred over the past 48 hours, required authorities to suspend operations not only to restore services but also to ensure the continued security of the system and the integrity of users' data.

He assured the public that "technical teams are working to resolve the crisis as soon as possible and to safely bring the secure payment services back online." - July 2, 2026