Pusat Data Nasional Cyber Incident: A Call for Improved Security Awareness

July 1, 2024

Last week, the Pusat Data Nasional (PDN) in Indonesia suffered a significant cyber incident, due to a ransomware attack which has affected over 210 institutions and disrupted numerous public services, including immigration and online student registrations. This incident has raised critical concerns about the state of cybersecurity in various government agencies, highlighting a pressing need […]

According to the Straits Times, the attack has led to severe consequences, including delays in visa, passport, and residence permit processing. These disruptions underscore the urgent need for improved cybersecurity measures across all sectors.

As a cybersecurity company, we find this breach deeply concerning. It proves a widespread lack of adequate security protocols and awareness, which can have tremendous consequences. The ransomware attack on PDN, reportedly involving a variant known as Brain Cipher, encrypted vast amounts of sensitive data and demanded a substantial ransom of 131 billion Rupiah (approximately $8 million).

As mentioned in Reuters, the attack severely disrupted public services and revealed a crucial oversight: much of the affected data was not backed up. This lack of backup capabilities escalated the impact of the attack, leading to significant delays and operational challenges across affected parties.

Considering this event, and the fact that it won’t be the last one, it is imperative that all of us taking proactive actions to mitigate such risks in the future:

Enhanced Security Training: Regular and comprehensive cybersecurity training for all employees, especially those in key positions, to recognize and respond to potential threats effectively.
Regular Audits and Assessments: Conducting frequent security audits and vulnerability assessments to identify and rectify weak points in data governance and digital systems.
Robust Backup and Restoration Solutions: Implementing reliable and redundant backup solutions and regularly performing restoration tests to ensure data integrity and availability in the event of an attack.
Investing in Advanced Security Technologies: Utilizing advanced security technologies such as intrusion detection systems, data lost prevention, and cloud security posture management solutions, to protect sensitive data.
Collaboration and Information Sharing: Fostering collaboration between public and private sectors to share information on threats and best practices for cybersecurity.

Together we are not only protecting our digital assets but also building a more resilient and secure digital environment for society.

News references:

‍