BSSN Finally Speaks Up After Data Leakage Issues At KPU

KPU data allegedly leaked (photo: dock. VOI)

JAKARTA - After approximately three days after the issue of the leak of 252 million voter data (204 million) after being screened at the General Elections Commission (KPU) was leaked, the National Cyber and Crypto Agency (BSSN) finally spoke up.

BSSN spokesman Ariandi Putra said that currently BSSN has communicated and coordinated with the KPU regarding investigative efforts, as well as conducting digital analysis and forensics.

"In handling cyber incidents that occurred at the KPU, BSSN is conducting digital analysis and forensics in terms of applications and servers to find out the root cause of the cyber incident that occurred," Ariandi said in an official statement received by VOI on December 1 via WhatsApp message.

In addition, Ariandi also emphasized that BSSN always coordinates intensely with the KPU and is ready to provide assistance and recommendations for increased security for the KPU's information system.

However, the BSSN spokesman said the results of the investigation and follow-up developments of the alleged data leak incident would later be delivered directly by the KPU as the organizer of the electronic system.

Previously, cybersecurity consultant Teguh Apriyanto and Chairman of the Cyber Security Research Institute (CISSReC) Pratama Pershada found that 252 million Indonesian voter data had been leaked and traded on illegal sites.

A hacker who uses the name Goodminton admitted that he managed to get voter information in Indonesia containing NIK, NKK, ID card number, TPS, e-KTP, gender, and date of birth.

Based on another screenshot shared by Goody, Pratama predicts that it is very likely that fire will gain login access with the KPU Admin role from the sidalih.kpu.go.id domain using the phishing method, social engineering or through malware.

Pratama said, if the prediction is correct, this could be very dangerous at the election democracy party which will soon be held because it is possible that the account with the role admin can be used to change the results of the vote count recapitulation.