YLKI Asks BPJS Health To Explain Their Leaked Data

Illustration of BPJS Kesehatan card (Mahesa ARK/VOI)

JAKARTA - Chairman of the Daily Board of the Indonesian Consumer Institute Foundation (YLKI) Sudaryatmo asked BPJS Kesehatan to open a voice about the data allegedly leaked and traded. This is important to provide a sense of security for data owners.

"The agency that collected the data and allegedly leaked should provide clarification to the public. Because this is still a crossroads also how much data is leaked," sudaryatmo said when contacted by VOI, Friday, May 21.

In addition, BPJS Kesehatan is also asked to give access to the public to check if their data is leaked and traded. "Only if it leaks yes ask the public to change the access PIN," he said.

Sudaryatmo said the public could sue for the data leak if it was proven and caused harm. However, this will be difficult because it must be known exactly where the data was leaked from.

"The leaking of data is from where, because they certainly cooperate with many agencies. This remains to be learned, including the form of cooperation how and how much the cooperation parties can access data," he explained.

"Of course not all data can be accessed. Well, when there is cooperation with third parties it must be ensured they have a data protection system that can guarantee and this must all be opened," added Sudaryatmo.

With this kind of incident, he also hopes that the public will pay more attention to their personal data before handing over to certain parties. Including, asking how an agency or company maintains the data.

Because, people actually have the right to ask about the security of the personal data they submit. "So before handing over the data to other parties they have the right to ask," sudaryatmo said.

"Data protection gimana. First it was. Then, he collects data for what, then whether this data is shared to third parties or not, what technology is used to protect the data. Everything must be clear before consumers submit personal data," he added.

Previously reported, a number of Indonesian population data re-appeared in the hacker forum, Raid Forums. According to the site, there are millions of indonesian population data that have been traded since May 12.

The leak of this information is thought to have come from BPJS Kesehatan data. Raid Forums account named Kotz, he explained in his description column that he has indonesian population data in the form of full name, ID card, phone number, email, NID, and home address.

More surprisingly, kotz also provided as much as 1 million free sample data to test from the 279 million it owns. Kotz also said it has 20 million personal photo data of Indonesians.

He also lists his Telegram contacts for anyone who wants to transact related to these important data. It even lists three links for anyone who wants to check their sample data.