337 Million Dukcapil Data Allegedly Leaked, Observer: Quite Worrying

Dukcapil data leak (photo: Twitter Teguh Apriyanto)

JAKARTA - A total of 337 million Indonesian population data were allegedly leaked on the Breach Forum dark site on Sunday, July 16, 2023. The leaked data includes names, NIK, KK Number, date of birth, address, father's name, mother's name, father's NIK, mother's NIK, birth or marriage certificate Number, and others.

First discovered by Indonesian Ethical Hacker founder Teguh Apriyanto said, "This time what was leaked was all of our data in Dukcapil as much as 337 million data," on Twitter.

Responding to this alleged leak, cybersecurity observer Alfons Tanujaya expressed his concern through a video uploaded directly through his personal YouTube channel.

"Of the million samples accessible, it is quite concerning. This data is more than Indonesia's population data, which is around 270 million. However, it is suspected that this contains data that has died," he said.

Alfons assumed that the hacker with the initials RRR managed to access the database server that was copied raw. He also suspects that this data does come from Dukcapil.

"330 million lines, it contains 69 field databases. So it looks like what was successfully accessed was the database server, it was copied rawly. So it's not from the interface. If you look at the contents of the column, it is quite strong, it is suspected that this came from Dukcapil," explained the founder of Vaksin.com.

According to Alfons, what can be used as a benchmark is that this data obtained from the Dukcapil server is because there is a name and NIK of the registration officer.

"So if you deny it again, I'm also confused, then what data is that?" he concluded.

According to him, an audit of data management should be conducted regularly, whether it has implemented good data management standards or not. In addition, Alfons also suggested strict sanctions if there is data management that is not in accordance with standards.

"With this, what we hope is BSSN. So BSSN can guide, also BSSN should have given a warning. This is the most core data population data. Please keep it well," he said.