INAFIS Data Leakage Can Break Accounts? This Is What Cyber Experts Say

Illustration of cybercrime (photo: Freepik)

JAKARTA - Recently, a post from the owner of the Instagram account @MrBert claimed that the leak of previous data against the Indonesia Automatic Fingerprint Identification System (INAFIS) could be used to break into bank accounts.

In the video, MrBert shows a post from the SOCRAdar website containing posts of INAFIS data leaks on the BreachForums site that occurred a few months ago.

In another BreachForums post shared, MrBert also showed where the post showed the sale of Indonesia's eKTP data, one of which contained the name of the biological mother.

"This is what makes me tremble. It's been sold, it's 19 months 10. This is sold NIK data to your mother's name. Then what is the danger? You see this, I just deactivated (bank sign)," said the account.

He also showed a video clip where he tried to contact a bank customer service and used the leaked data to disable the account.

"Just bank can I be stupid with this data. I need to hack or not? No need," he continued.

Vaccine cybersecurity consultant Alfons Tanujaya also confirmed the risk of closing the account. Because according to him, if people who know your data include the name of the mother's girl and the bank believes, then this unwanted thing can happen.

But on the other hand, cybersecurity consultant Alfons Tanujaya appealed to the public not to worry, because according to him, the takeover of funds from an account to another account requires the person's mobile banking credentials.

"If your mobile banking credentials are taken and your OTP is taken, there can be a takeover of funds. But taking over the account is almost impossible to happen with only population data and the name of the biological mother's girl," explained Alfons.

"So, my friends don't need to worry too much. And the important thing is that you secure usernames, passwords, mobile banking and OTP. Never run the APK," he said.