Bareskrim Polri Arrest Honorary Teachers Breaking Data From The State Civil Service Agency

Director of Cyber Crime at Bareskrim Polri Brigadier General Himawan Bayu Aji told reporters, Tuesday, September 24. (Rizky A-VOI)

The Criminal Investigation Unit of the National Police revealed cases of hacking or illegal access and dissemination of data from the State Civil Service Agency (BKN) and named an honorary teacher with the initials BAG (25) as a suspect.

Director of Cyber Crime at Bareskrim Polri Brigadier General Himawan Bayu Aji said the hacking was carried out by the suspect using an account obtained from a darkweb.

"The modus operandi of the suspect BAG is to illegally access using the SQL injection method using the username password obtained through darkweb," Himawan told reporters, Tuesday, September 24.

Then, the hacking data was sold in a criminal forum under the name breachforum.st. The profit he got reached 8,000 United States (US) dollars.

Not only that, based on the results of the examination and procurement, the data that was hacked and stolen was 6.3 giga byte.

"Pada tanggal 9 Agustus 2024 pelaku melakukan illegal akses terhadap sistem elektronik milik bkn dengan domain https://satudataasn.bkn.go.id/," sebutnya.

The suspect sold the data that had been obtained by listing the telegram account on the breachforum.st forum. So, people who are interested in buying can contact directly.

"Tujuan tersangka mengunggah sampel data tersebut adalah untuk membuat orang percaya bahwa tersangka memiliki data tersebut dan selain itu juga merupakan aturan yang ada pada https://breachforums.st/," ungkapnya.

Apparently, the hacking and dissemination of the data were not the first time the suspect had done it. From his confession, 40 systems have been broken into

"A total of 40 electronic systems not only belong to BKN, but also belong to one university in America, a private company in America, Taiwan, Belgium, England, Thailand, South Africa, India and Hong Kong," said Himawan.

In this case, the suspect is charged with Article 67 paragraph (1), (2) in conjunction with Article 65 paragraph (1), (2) of Law Number 27 of 2022 concerning the protection of personal data.

Then, Article 46 paragraph (1), (2), (3) in conjunction with Article 30 paragraph (1), (2), (3) and or Article 48 paragraph (1), (2), (3) in conjunction with Article 32 paragraph (1), (2), (3) Law number 1 of 2024 concerning the second amendment to Law Number 11 of 2008 concerning information and electronic transactions.

Also, Article 4 of Law number 8 of 2010 concerning the prevention and eradication of money laundering and Article 55 of the Criminal Code carries a penalty of 10 years in prison.