Kominfo Investigation Results into Alleged 34 Million Indonesian Passport Data Leaking: Found There Are Similarities

Cases of alleged data leaks have occurred again in Indonesia. This time, hacker Bjorka is back in action by selling 34 million Indonesian passport data at low prices on the dark web.

From the sample data provided, the sample data leaked by Bjorka contained personal data such as name, gender, date of birth, passport number, and passport expiration date.

According to cybersecurity expert Pratama Persadha, the data leaked by Bjorka this time is fairly valid. The reason was that one of the data lines in the sample file that was distributed contained his passport data which had expired in 2011.

“For now it cannot be known with certainty whether the data that was shared really came from the Director General of Immigration’s server or Bjorka took the data from other leaked data. For this reason, an audit and digital forensics are needed so that the source of the data can be ascertained,” he said when contacted by Tekno Liputan6 .com, Thursday (6/7/2023).

Pratama said, this data leak was very dangerous for the community. This is because this personal data can be used by other people to commit crimes such as fraud, either direct fraud against people whose data is leaking or other fraud that uses other people’s personal data that is leaked.

“What’s even more dangerous is if the personal data is used to create fake identities which are then used to commit acts of terrorism, so that the parties and families whose personal data are used will be accused of being terrorists or their supporting groups,” he said further.

Pratama also highlighted that this data leak could be detrimental to the government, because the source of the leak was claimed to come from the Director General of Immigration, which is a government agency. This leads others to conclude that government sector cybersecurity is quite low.

This condition of course tarnishes the good name of the government in the eyes of the Indonesian people and in the eyes of the international community. This is because the government is unable to carry out cyber security for its institutions, of which many agencies have high competence, such as the BSSN, BIN, and the Ministry of Communication and Informatics.