TheJakartaPost
Please Update your browser
Your browser is out of date, and may not be compatible with our website. A list of the most popular web browsers can be found below.
Just click on the icons to get to the download page.
Security concerns raised as alleged BPJS data breach investigation moves slowly
An account with the username Kotz claimed on online hacking forum radforums.com on May 12 to have the personal data of 279 million Indonesians, alive and deceased.
Change Size
A resident peeks through the glazed window of a Health Care and Social Security Agency (BPJS Kesehatan) office in Bogor regency, West Java, on July 30, 2018. (Antara/Yulius Satria Wijaya)
A
n investigation into the alleged breach and attempted sale of the private information of over 200 million Indonesians has yet to show significant progress, raising concerns over the country’s data protection measures.
An account with the username Kotz claimed on online hacking forum radforums.com on May 12 to have the personal data of 279 million Indonesians, alive and deceased. The information consisted of full names, ID card numbers, email addresses, phone numbers, dates and places of birth, as well as salary details.
The information allegedly belongs to national health insurance (JKN) policyholders, which is managed by the Health Care and Social Security Agency (BPJS Kesehatan).
Kotz’s post and resulting replies were no longer available on raidforums.com as of Tuesday.
The Communications and Information Ministry previously said it was investigating the alleged data breach and had taken down download links Kotz had allegedly provided for data on 2 million people as a sample. The ministry has also blocked access to raidforums.com for Indonesian internet users.
Read also: Alleged breach of BPJS data points to Indonesia's weak data protection: Experts
During a press briefing on Tuesday, BPJS Kesehatan did not acknowledge that the leaked data had come from its database. Previously, the Communications and Information Ministry said it had found indications that the information was identical to BPJS Kesehatan’s data “as it contains BPJS Kesehatan participant information, like JKN identity numbers and [premium] payment statuses”.
