2.9 Million Cermati.com User Data Breached

Cermati.com Website (Aditya Fajar / VOI)

JAKARTA - A hacking case also happened to an Indonesian financial technology (fintech) company, Cermati.com. A total of 2.9 million user data has been compromised and traded in cyberspace forums.

Quoting a tweet from the founder of the Ethical Hacker Indonesia community, Teguh Aprianto, the data includes full name, NIK, NPWP, address, telephone number, account, company where he works and the name of the biological mother. These data are sold for 2,200 US dollars, or around Rp. 32 million.

Do you already know the question https://t.co/GjBMmAsoUI was broken? Observe the total user data that was leaked: 2.9 million data. The leaked data includes: - Full name- NIK- NPWP- Email- Password (Bcrypt) - Address- Numbers HP- Income- Account- Job details- Birth mother's name pic.twitter.com/B8U8Cgq1uw

- Teguh Aprianto (@secgron) November 1, 2020

To overcome this problem, Cermati.com claims to have blocked access to the database as a security measure. Cermati.com has also reported this incident via e-mail sent on 31 October.

In the e-mail, they admitted that there were parties who wanted to illegally infiltrate the Cermati system. However, it is not clearly stated how much user data has been compromised or not, as well as the amount of 2.9 million user data circulating on internet forums.

"Some time ago, we detected unauthorized access to our platform containing data from some Cermati.com users. This is a very serious concern for us and we have immediately taken steps to improve system security," wrote the Cermati.com team.

Cermati.com itself is a startup engaged in the fintech sector. This company often provides a variety of information related to financial products that can help users make informed financial decisions.

Regarding this case, Cermati.com has collaborated with the National Cyber and Crypto Agency (BSSN) to carry out investigations and take appropriate steps to ensure security and protection of user data.

In addition, Cermati.com also urges users to jointly implement preventive measures such as two-factor authentification and One-Time Password, in order to avoid hacking attempts from irresponsible parties.

"To inform and advise users to take security measures periodically to protect data from hacking attempts," said the Cermati.com team.