Perkeso

Perkeso, also known as Socso, is Malaysia’s Social Security Organization, a statutory body operating under the Ministry of Human Resources. Its core function is to administer the Employment Injury Scheme and the Invalidity Scheme, which provide financial and medical protection to private‑sector employees who suffer work‑related accidents, occupational diseases, or invalidity. Through these schemes, Perkeso delivers medical treatment, cash benefits, rehabilitation services, and survivor support to eligible workers and their dependents. The organization also manages contribution collection from employers and employees, ensuring the sustainability of the funds that finance these benefits. In addition to benefit administration, Perkeso conducts outreach and education programmes to promote workplace safety and awareness of social security rights among workers and employers.

Perkeso maintains a nationwide presence, with regional offices and service centres located across Malaysia’s states and federal territories. This geographic distribution enables it to serve a diverse workforce employed in industries ranging from manufacturing and construction to services and agriculture. While specific membership figures are not provided in the source material, the organization’s mandate covers all private‑sector workers who are required to register under the Social Security Organisation Act 1969. Its operational footprint includes processing claims, conducting medical assessments, and facilitating vocational rehabilitation for injured workers. The organization’s service delivery is supported by an information and communication technology infrastructure that handles contributions, claims management, and beneficiary data.

A distinguishing attribute of Perkeso is its role as the primary provider of social security protection for Malaysia’s private sector, a function that differentiates it from public‑sector pension schemes and private insurance products. The organization’s focus on employment injury and invalidity schemes underscores its specialization in work‑related risk coverage rather than general retirement or health insurance. In December 2023, Perkeso confirmed a cyberattack that compromised its systems, resulting in the leakage of questionable and incomplete personal data such as names, identification numbers, salaries, and business details, alongside internal breach discussions. The incident followed an earlier attempted attack months prior, highlighting persistent vulnerabilities despite the ICT team’s success in restoring operations and containing the initial threat. This episode has drawn attention to broader challenges in safeguarding government‑held personal information amid legal gaps that limit accountability for public agencies under current data protection laws.

Structurally, Perkeso is established as a statutory body, meaning it is created by an act of Parliament and operates with a degree of administrative autonomy while remaining accountable to the Minister of Human Resources. It is not a subsidiary of any parent corporation, nor does it hold subsidiary entities of its own; its governance is overseen by a board appointed in accordance with the Social Security Organisation Act. The organization’s funding derives primarily from employer and employee contributions, supplemented by government allocations for administrative and developmental purposes. As a public institution, Perkeso’s activities are subject to audit and oversight mechanisms designed to ensure transparency and the proper management of the social security funds entrusted to it.