Bareskrim Polri Gandeng BSSN Investigate Alleged NPWP Data Leaks

Director of Cyber Crime at Bareskrim Polri Brigadier General Himawan Bayu Aji (right)

JAKARTA - The Directorate of Cyber Crime, Bareskrim Polri, is investigating the alleged leak of 6 million data on the Main Taxpayer Number (NPWP) of Indonesian citizens. In its investigation, the National Cyber and Crypto Agency (BSSN) was involved.

"So, we are still working with ministries and institutions that have an interest in this, with BSSN we coordinate because this is a collaboration," said Director of Cyber Crime at the National Police Criminal Investigation Agency Brigadier General Himawan Bayu Aji to reporters, Tuesday, September 24.

According to him, the National Police cannot work alone in investigating problems or cases that occur in cyberspace. That way, cooperation between institutions must be carried out.

"We have to work together, both with ministries and institutions that have the potential and with data owners, so it becomes an important thing and becomes an ecosystem for case disclosure. So cooperation is an important thing," he said.

Although so far no investigation steps have been clearly conveyed, Himawan said that his party was waiting for information from BSSN regarding digital forensics in disclosing the alleged hacking.

"We are also conducting an investigation, whether it has anything to do with this one, we are investigating it," he said.

"Then we also wait with communication with BSSN to do forensics, what are the typical and topological things like, it becomes an important thing for later direction of investigation," continued Himawan.

Terlepas langkah-langkah penyusutan yang sedang dilakukan, ditegaskan bila Polri dugaan kebocaan data ini sedang ditelidiki untuk mengungkap penyebab atau hal lain di baliknya.

"It's still in the process, communicated," said Himawan.

The alleged leak of NPWP data emerged after the founder of the Indonesian Ethical Hacker Teguh Aprianto uploaded a screenshot of the Breach Forums site. Through the X @secgron account, he said as many as six million NPWP data were traded on the site by an account named Bjorka on September 18, 2024.

Apart from NPWP, data that was also dragged, including the Population Identification Number (NIK), address, telephone number, electronic mail (email), and other data. The selling price of all the data reached Rp150 million.

In the same tweet, Teguh said the leaked data also belonged to President Joko Widodo (Jokowi) and his sons Gibran Rakabuming Raka and Kaesang Pangarep.