TheJakartaPost
Please Update your browser
Your browser is out of date, and may not be compatible with our website. A list of the most popular web browsers can be found below.
Just click on the icons to get to the download page.
Indonesia says it has begun recovering data after major ransomware attack
Coordinating Political, Legal and Security Affairs Minister Hadi Tjahjanto said that data for 30 public services overseen by 12 ministries had been recovered using a "decryption strategy" without elaborating.
Change text size
Gift Premium Articles
to Anyone
Share the best of The Jakarta Post with friends, family, or colleagues. As a subscriber, you can gift 3 to 5 articles each month that anyone can read—no subscription needed!
A stock illustration of personal data. (Shutterstock/Miha Creative)
I
ndonesia said it is beginning to recover data that had been encrypted in a major ransomware attack last month which affected more than 160 government agencies.
The attackers identified as Brain Cipher asked for US$8 million in ransom to unlock the data before later apologizing and releasing the decryption key for free, according to Singapore-based cybersecurity firm StealthMole.
The attack has disrupted multiple government services including immigration and operations at major airports. Indonesian officials have acknowledged that the bulk of the data had not been backed up.
Coordinating Political, Legal and Security Affairs Minister Hadi Tjahjanto said in a statement late on Thursday that data for 30 public services overseen by 12 ministries had been recovered using a "decryption strategy" without elaborating.
"The Communications and Information Ministry is using a decryption strategy to recover services or assets from ministries, state agencies, and the regional governments that are affected. We are handling this gradually," the statement said.
It was not immediately clear if the government had used Brain Cipher's decryption key. Hadi and Communications and Information Minister Budi Arie Setiadi did not immediately respond to requests for comment.
Ransomware attackers use software to encrypt data and demand payment from victims to restore the data. Indonesia has said this attack used malicious software called Lockbit 3.0.
