APSN Banner

Recently hacked national data center linked to 56 public service systems in Indonesia

Source
Tempo - June 25, 2024

Raden Putri, Jakarta – Indonesia's Temporary National Data Center (PDNS) 2 has been experiencing disruptions since Thursday, June 20, 2024. Immigration services are among those experiencing problems. According to the latest reports, the government cloud computing service managed by the Ministry of Communications and Information is gradually recovering and can be used again.

Semuel Abrijani Pangerapan, director general of applications and information at the Ministry of Communication and Information, said that the Directorate General of Immigration is still restoring immigration services, so the system is gradually recovering. "The autogate system and immigration counters are working, both at the departure and arrival gates," he said in an official statement on Sunday, June 23.

The disruption affected a number of public services. In addition to the digital services of the General Directorate of Immigration of the Ministry of Justice and Human Rights, which are not functioning, there are also the services of the New Student Admissions (PPDB) in various provinces and regencies, which are experiencing problems, causing the regional government to extend the registration period.

There are a number of public service ministries and institutions that are integrated with the Temporary National Data Center 2. Based on data as of 2021, there are 56 ministries and institutions in Indonesia that have used PDNS 2:

1. ANRI (National Archives of the Republic of Indonesia)
2. BKN (State Civil Service Agency)
3. BNPB (National Disaster Management Agency)
4. BSSN (National Agency for Cyber and Cryptography)
5. National Council of Crafts
6. DKPP (Honorary Council of Election Organizers)
7. Ministry of Religion
8. Ministry of ATR/BPN
9. Ministry of Home Affairs
10. Coordinating Ministry of Economy
11. Ministry of State Apparatus Strengthening and Bureaucratic Reform
12. Ministry of Education and Culture
13. Election Supervisory Commission
14. Bappenas
15. BIG (Geographic Information Agency)
16. DKKDN (National Council for Family and Regional Resilience)
17. BKPM (Investment Coordination Board)
18. BMKG (Meteorology, Climatology and Geophysics Agency)
19. National Border Management Agency (BNPP)
20. BP2MI (BNP2TKI) or Indonesian Agency for the Protection of Migrant Workers
21. BPJS (Social Security Management Agency)
22. BPOM (Food and Drug Administration)
23. Central Statistics Agency
24. BRIN (National Agency for Research and Innovation)
25. BSN (National Standardization Body)
26. Presidential Staff Office
27. Coordinating Ministry for Human Development and Culture
28. Ministry of Energy and Mineral Resources
29. Ministry of Law and Human Rights
30. Ministry of Health
31. Ministry of Finance
32. Ministry of Communication and Information
33. Coordinating Ministry for Political, Legal and Security Affairs
34. Ministry of Cooperatives and SMEs
35. Ministry of Foreign Affairs
36. Ministry of Tourism and Creative Economy
37. Ministry of Women Empowerment and Child Protection
38. Ministry of Trade
39. Ministry of Agriculture
40. Ministry of PUPR
41. Ministry of Social Affairs
42. Ministry of Maritime Affairs and Fisheries
43. Ministry of Environment and Forestry
44. Judicial Commission
45. National Human Rights Commission
46. LAPAN (now BRIN or National Agency for Research and Innovation)
47. State Administrative Institutions
48. Constitutional Court
49. The Ombudsman
50. National Library
51. PPATK (Center for Financial Transactions Reporting and Analysis)
52. General Secretariat of DPR RI
53. General Secretariat of MPR RI
54. Bapeten (Nuclear Regulatory Agency)
55. Ministry of Transportation
56. LKPP (Government Goods/Services Procurement Policy Institute).

Indonesia's Temporary National Data Center (PDNS) 2 has reportedly been attacked by the LockBit 3.0 ransomware virus. This variant is said to be similar to the one that attacked Bank Syariah Indonesia (BSI) customer data in May last year.

According to the latest information, the hackers demanded that the Indonesian government pay them US$8 million, or about Rp131 billion in today's rate, in exchange for the 210 data files they stole.

This was confirmed by Herlan Wijanarko, Director of Network and IT Solution Telkom Sigma, at the Ministry of Communication and Information office in Jakarta on Monday, June 24.

Meanwhile, Deputy Minister of Communications Nezar Patria said it was likely that the attackers were based overseas. Nezar did not confirm whether the government will pay the US$8 million demand. "Not yet," he said. "We are focusing on isolating the existing data," he said.

Nezar also said there is no current threat of data deletion. "This is just a number of data that is encrypted. So, we couldn't get in there," he said.

Source: https://en.tempo.co/read/1883860/recently-hacked-national-data-center-linked-to-56-public-service-systems-in-indonesi

Country