Millions of records from Putrajaya's MyIdentity database have allegedly been sold online.

The seller, known only as actifedot, placed an advertisement for data on a hacker forum known as breached.co on April 29.