KPU Dibobol Hacker, 204 Data Pemilih Dijual Rp 1,2 Miliar

KPU Hacked by Hacker, 204 Voter Data Sold for Rp1.2 Billion

Dream - The General Election Commission (KPU) data is suspected to have been leaked. Approximately 204 million permanent voter data (DPT) from KPU were hacked and sold on the internet for Rp1.2 billion. The information about this personal data leak was first revealed by cybersecurity consultant Teguh Aprianto on Tuesday, November 28, 2023. Through the social media platform X @secgron, he shared a screenshot of a post by a hacker named Jimbo with the caption "KPU.GO.ID 2024 Voters RAW DATABASE". The hacker claimed to have obtained around 252 million data in his post on the stolen data trading site, Breachforums.

KPU Dibobol Hacker, 204 Data Pemilih Dijual Rp 1,2 Miliar

However, there are several duplicated data and finally after going through the filtering process, only 204,807,203 unique personal data remain.

From the data, Jimbo explained that he obtained complete information starting from NIK, NKK, no_ktp (Passport), Name, tps_id, Disabled, ektp, gender, date of birth, place of birth, marital status, address, rt, rw, and many more. For all of the leaked personal data, the hacker set a price of around 204 million leaked Indonesian population data, which is approximately USD 74,000 or around IDR 1.2 billion. Information about the leakage of Indonesian population data was also confirmed by cyber security expert Pratama Persadha. In his statement, he revealed that the leaked data figure is almost the same as the number of voters in the Permanent Voter List (DPT) of the General Election Commission (KPU).

"Personal data of the leaked residents is almost the same as the number of voters in the Permanent Voter List (DPT) of the General Election Commission (KPU) from 514 districts/cities in Indonesia and 128 representative countries."
word Pratama, quoted from liputan6.com.

There is no specific Bahasa text provided in the question. However, "dream.co.id" is not a Bahasa text, it is an Indonesian website domain.

"Login Access"

"Not only that, Pratama suspects that the hacker has gained login access with the admin role of KPU from the domain sidalih.kpu.go.id. 'The perpetrator could possibly obtain login access to the domain sidalih.kpu.go.id through methods such as phishing, social engineering, or through malware,' he explained."

He assessed, if the hacker Jimbo really succeeded in obtaining credentials with the Admin role, it would certainly be dangerous for the democracy party of the 2024 Election.

"The account with the admin role can be used to manipulate the results of the vote counting, which will certainly undermine the democratic process, or could cause unrest on a national scale during the upcoming elections.""
"pungkasnya." translates to "concluded."

"dream.co.id"

"Digital Forensics"

To ensure the attack points exploited by hackers to obtain voter data claimed to originate from the KPU website, an audit and forensic analysis of the KPU security system and server still need to be conducted.

"Until now, there has been no official response from the KPU regarding the leakage of voter data on the breachforums forum. 'While conducting an investigation, it would be good for the KPU IT team to change the username and password of all accounts that have access to the KPU system, in order to prevent the users that were previously obtained by hackers from being reused,' said Pratama summarizing."

KPU Asks for Assistance from BSSN

Member of the General Election Commission (KPU) Betty Epsilon Idroos mentioned that they have heard allegations of voter data breach in the 2024 Election. Betty stated that KPU is coordinating directly with the National Cyber and Encryption Agency (BSSN) to anticipate this issue.

"Now we are asking for assistance from the Cyber Task Force. Currently, BSSN is working," said Betty at the KPU Office, Menteng, Central Jakarta, on Tuesday (28/11/2023) night. She mentioned that coordination with BSSN is being carried out by KPU to ensure whether the voter data in the KPU database has been breached by hackers. However, she is reluctant to talk much about this matter."

"First, it needs to be checked. It needs to be checked first, what the data is like, how it looks, and then it can be checked again. It is being traced again."
he said.

"dream.co.id"

News

Profile of Lieutenant General Maruli Simanjuntak, Son-in-Law of Luhut Pandjaitan who is rumored to be inaugurated as the Army Chief of Staff today

The figure of Lieutenant General Maruli Simanjuntak, who is rumored to be inaugurated as the Army Chief of Staff today.