The Malaysian Communications and Multimedia Commission says it should not be held responsible for implementing orders from the minister.
Deputy communications and multimedia minister says witnesses have been called in to have their statements recorded.
They warn that with online threats becoming harder to detect, any organisation or individual could be vulnerable.
Tech portal Lowyat.net says the files were leaked online as early as September 2016, in the second big data leak reported in three months.
IGP says holder of the mysterious email account is believed to be an employee of a company that works for MCMC.
PJ Utara MP Tony Pua slams 'simplistic' advice given by government in Dewan Rakyat on 'changing passwords regularly', instead of acting on telcos to improve cyber security.
Tech blogger Keith Rozario says banning the site means that ordinary folks don't deserve to know whether their data has been compromised, but hackers do.
Communications and Multimedia Minister Salleh Said Keruak says the issue has since been settled as Lowyat.net cooperated with MCMC when asked to pull down the report.