TheJakartaPost
Please Update your browser
Your browser is out of date, and may not be compatible with our website. A list of the most popular web browsers can be found below.
Just click on the icons to get to the download page.
Digital threats, real consequences: Becoming cyber ready
Alarming statistics highlight the urgent need for robust cybersecurity measures and regulatory frameworks, which the country currently lacks.
Change text size
Gift Premium Articles
to Anyone
Share the best of The Jakarta Post with friends, family, or colleagues. As a subscriber, you can gift 3 to 5 articles each month that anyone can read—no subscription needed!
The logo of the National Cyber and Encryption Agency (BSSN) is seen on March 15, 2019, at the agency’s office in Jakarta. (JP/Dhoni Setiawan)
R
ecently, I received a call from someone posing as a police officer claiming my data had been stolen and used to open a bank account.
Pressured to attend a "police investigation" via Zoom, I became suspicious and hung up, later confirming it was a scam. How did these scammers obtain my number? The likely culprit: Data breaches.
Last year, the National Cyber and Encryption Agency (BSSN) documented over 330 million traffic anomalies and approximately 500,000 ransomware activities.
These cyberattacks target businesses and public institutions, resulting in theft of personal data and financial information that enables identity theft and fraud, causing significant emotional distress to victims.
BSSN's further examination of the dark web revealed government agencies accounted for more than half of the 56 million data records exposed there.
These alarming statistics highlight the urgent need for robust cybersecurity measures and regulatory frameworks, which the country currently lacks.
Instead of a specific cybersecurity law or framework, Indonesia relies on a patchwork of regulations: Law No.11/2008 on Electronic Information and Transactions (ITE), which has undergone multiple amendments over 17 years; Law No. 27/2022 on Personal Data Protection (PDP), which gave businesses until October 2024 to adjust; and various BSSN regulations on cyber incident reporting and management.
