How Come, 230 Thousand COVID-19 Patient Data Leaked In The Hacker Forum

Ilustrasi peretasan (Image by StartupStockPhotos from Pixabay)

JAKARTA - Again, cases of personal data leakage have occurred again in Indonesia. This time, 230 thousand data on COVID-19 patients are suspected to have been leaked and traded on hacker forums.

From VOI's search, it was stated that a user on the online forum RaidForums by the name of Database Shopping had posted about 230 thousand rapid test results that were suspected to have been leaked since last May 20. The data was uploaded on Thursday, June 19, 2020 yesterday.

In his statement, the data is stored in MySQL form. Based on the spoiler data that is shared, it contains information, including name, citizenship status, date of birth, age, telephone number, home address, Population Identity Number (NIK), to the name of Indonesian and foreign citizens who are Under Monitoring (ODP) and Patients. Under Monitoring (PDP).

"I sell it to those who want it," the user posted on the RaidForums website, Saturday, June 20.

screenshot from the RaidForums site (Aditya / VOI)

So far, this user claims to have 230 thousand citizen data related to Covid-19 in Indonesia. Meanwhile, official government data shows that the PCR tests that have been carried out in Indonesia reached 366,581 people.

Although it is not certain the validity of these data. There were several forum members who responded to the post, asking the price of any leaked data.

The government itself has not commented on the leakage of citizen data related to Covid-19. Summarized from the CNN Indonesia page, the Minister of Communication and Informatics (Menkominfo) Johnny G Plate stated that he would coordinate with the National Cyber and Crypto Agency (BSSN) to trace the alleged data leakage.

The RaidForums site itself is a gathering place for hackers to exchange information regarding data leaks from various sites. This forum is also not accessible carelessly, users must have an account or open this page using a VPN.

Several cases of leakage of information data from sites in Indonesia, have often emerged from this forum. For example, leakage of user account data from Bukalapak, Tokopedia, then identity data from the Ministry of Education and Culture, and the National Police.