Indonesia’s President Jokowi among 6 million tax payers whose data stolen, tax agency launches probe

Sept. 19, 2024, 1:38 p.m.

Read time estimation: 4 minutes.

  2

Indonesia’s tax agency has launched an investigation into a significant data breach that reportedly exposed the personal information of 6 million taxpayers, including President Joko ‘Jokowi’ Widodo and several high-ranking government officials.

The breach, which has raised serious concerns about the country’s cybersecurity measures, comes amid a series of cyber-attacks that have targeted both Indonesian companies and government agencies in recent years.

Indonesia’s data exposure

Cybersecurity expert Teguh Aprianto brought this data breach to the public's attention on Wednesday by sharing a screenshot on social media platform X (formerly Twitter). The screenshot revealed samples of national identity numbers and taxpayer identification numbers belonging to millions of Indonesians.

Advertisement The leaked data included personal information of prominent individuals like President Jokowi, his son Vice President-elect Gibran Rakabuming Raka, Finance Minister Sri Mulyani Indrawati, and other government officials. This sensitive data was reportedly found on the hacking site BreachForums, where it was being offered for sale at a price of 150 million rupiah (roughly $10,000).

Dwi Astuti, a spokesperson for Indonesia’s tax agency, confirmed that their technical team is currently conducting a thorough investigation into the alleged leak. While the agency has not yet provided specific details about the breach, they acknowledged the circulating information and the seriousness of the situation.

Indonesia’s cybersecurity nightmare

This recent incident follows a string of cyberattacks that have affected Indonesia in recent months. In June, a ransomware attack disrupted several government services, including immigration and major airport operations, affecting more than 280 government agencies.

These repeated breaches have highlighted the vulnerabilities in Indonesia’s cybersecurity infrastructure, which experts have attributed to inadequate protection measures for personal data.

President Jokowi addressed the issue on Thursday, acknowledging that data breaches are a global concern but emphasizing the need for immediate action. He urged the relevant ministries to minimize the impact of the breach and to strengthen cybersecurity measures to prevent future incidents.

Cybersecurity experts, including Teguh Aprianto, have warned that the exposure of taxpayer data could lead to targeted attacks by scam operations, potentially resulting in both material and immaterial losses for those affected. The breach could also reveal sensitive information about individuals’ earnings and financial transactions, further compounding the risks associated with the leak.

Advertisement How did Indonesia’s government respond

In response to this breach, the Indonesian government has been urged to conduct a thorough assessment of its cybersecurity systems and to implement more robust protections for personal data.

The repeated cyberattacks have highlighted the necessity of more robust measures to protect sensitive information and to guarantee that government agencies are better prepared to defend against cyber threats.

As the investigation continues, the Indonesian tax agency, along with other relevant authorities, will need to address the immediate fallout from the breach and take steps to restore public trust in the country’s digital security framework.

The outcome of this investigation could also have broader implications for Indonesia’s approach to data privacy and cybersecurity, potentially leading to new regulations or reforms aimed at preventing similar incidents in the future.

Advertisement This breach serves as a stark reminder of the escalating threat of cyber-attacks and the importance of maintaining strong cybersecurity protocols in an increasingly digital world.