Inp.polri.go.id - Semarang. The Cyber Security Research Institute CISSReC has reported a new data breach affecting the National Civil Service Agency (BKN) ahead of Indonesia's 79th Independence Day. 

Dr. Pratama Persadha, the Chairman of CISSReC, disclosed the breach following a post by an anonymous hacker named TopiAx on Breachforums on Saturday .

The hacker claimed to have accessed 4,759,218 lines of data from BKN, including personal details such as names, birthdates, ranks, civil servant numbers (NIP), and various other identifiers. The breach also involved sensitive information like addresses, phone numbers, emails, education details, and more, according to antaranews.com.

The hacker is reportedly offering this data for US$10,000 (approximately Rp 160 million) and has shared a sample containing information on 128 civil servants from Aceh.

CISSReC has randomly verified 13 of these samples via WhatsApp, confirming their validity, though some errors were noted.

As of Sunday morning (11/8/2024), there has been no official confirmation from BKN, the National Cyber and Crypto Agency (BSSN), or the Ministry of Communication and Information.

BKN had previously signed a memorandum of understanding (MoU) with BSSN to enhance data security, but this agreement expired in October 2023. It is unclear if it has been renewed.

(mg/inp/pr/nm)