Ministry Of Health Confirms Community Data In EHAC Not Leaking

ILLUSTRATION/UNSPLASH

JAKARTA - Head of the Data and Information Center of the Ministry of Health, Anas Ma'ruf, confirmed that public data contained in the Electronic Health Alert Card (eHAC) system was not leaked and was under protection.

"Community data contained in eHAC does not flow to partner platforms. Meanwhile, community data on partner platforms is the responsibility of the electronic system operator, by the mandate of Law Number 19 of 2016 concerning electronic information or the ITE Law", said Anas as quoted by Antara, Wednesday, September 1st.

Anas said the Ministry of Health was grateful for the input from those who provided information about the vulnerability so that it could be followed up to avoid greater cybersecurity risks.

Information on the vulnerability found on the eHAC partner platform was reported by VPN Mentor, a site that focuses on Virtual Private Networks (VPN), and was verified by the National Cyber and Crypto Agency (BSSN) and received by the Ministry of Health on August 23.

The Ministry of Health then traces and finds vulnerabilities in the eHAC partner platforms, takes action, and fixes the partner systems.

As part of mitigating cyber security risks, the Ministry of Health coordinates with the Ministry of Communication and Information, BSSN as well as the Criminal Investigation Directorate of the National Police to investigate to track and ensure there are no other vulnerabilities that can be used to exploit the system.

"The Ministry of Health urges the public to use the PeduliLindung application, where the latest e-Hac feature is integrated into it", he said.

The PeduliLindugi platform is stored in a national data center, where BSSN has conducted an Information Technology Security Assessment (ITSA). Quoted from the BSSN page, ITSA is a public service related to vulnerability testing, providing advice and recommendations related to security, to minimize vulnerability gaps in all government information systems.

"The Ministry of Health invites all communities and health stakeholders to utilize and maintain the use of information systems related to controlling COVID-19", he said.