The Indonesian National Cyber and Code Agency (BSSN) warned the Ministry of Communication and Informatics (Kominfo) about potential vulnerabilities before the National Data Center (PDN) was compromised by the LockBit 3.0 ransomware on June 20, 2024. Despite the warnings, the ministry’s response was inadequate, leading to significant data disruption.
The PDN, managed by Kominfo and BSSN, holds crucial data from 73 ministries and numerous local governments. The breach, as reported by Tempo Magazine in its feature ‘Pandora’s Box at the National Data Center’, highlights severe oversight in safeguarding this vital infrastructure.
BSSN’s prediction of a ransomware threat was communicated to all relevant agencies, including Kominfo, which failed to act on these warnings effectively, noted by BSSN head Hinsa Siburian.
The LockBit 3.0 ransomware encrypted critical data, causing disruptions, particularly in immigration services which reported issues to Kominfo. The attack was first detected on June 17, 2024, but responses were delayed until the system became inoperable on June 20.
Telecommunications expert Roy Suryo pointed out that while Kominfo was responsible for data backup protocols, the absence of such measures in their standard operating procedures shows grave oversight. He also questioned the 24/7 monitoring practices that failed during the incident.
Telkom Sigma, a private server provider, and other stakeholders were involved, but their responsibilities were limited to client requests. The lapse in requesting essential backup and security features by Kominfo significantly contributed to the breach’s impact.
Read More: Kominfo Mandates Operational Office for Starlink in Indonesia
Plans for more data centers across Indonesia, including partnerships with France, South Korea, the UK, and the USA, are underway. These developments underline the need for stringent security measures moving forward.
This incident highlights the critical importance of robust cybersecurity measures for protecting national infrastructure. For Singaporeans and international stakeholders, it serves as a reminder of the potential risks associated with digital governance and the necessity for international cooperation in cybersecurity efforts.
The breach of Indonesia’s National Data Center due to a ransomware attack underscores significant vulnerabilities in national cybersecurity practices. With ignored warnings and insufficient data protection protocols, the breach has had wide-reaching implications, including disruptions in government services and highlighting the need for improved security strategies and international collaboration in future projects.
Sources: Tempo, Medcom, Tribun News (2024)
