Bandung, IndonesiaSentinel.com — Taxpayer Identification Number (NPWP) data belonging to the Directorate General of Taxes (DJP) of the Indonesian Ministry of Finance was allegedly breached and sold by a hacker with the identity Bjorka. A suspected data breach involving 6 million Indonesian taxpayer records has reportedly surfaced on Breach Forums, with the personal information of President Joko Widodo (Jokowi) and his eldest son, Gibran Rakabuming, among those affected. Gibran, who is also the newly elected Vice President for the 2024-2029 term, was listed in the leaked data alongside other high-profile figures.
The alarming revelation was made by Teguh Aprianto, founder of Ethical Hacker Indonesia, in a post on X (formerly Twitter) on Wednesday, September 18th.
“Six million taxpayer data records are being sold for approximately IDR 150 million. The leaked data includes national identification numbers (NIK), taxpayer ID numbers (NPWP), addresses, phone numbers, and emails,” Teguh said in his post.
He further added that the tax ID numbers data of President Jokowi, Gibran, Kaesang (Jokowi’s second son), Indonesia’s Minister of Communications and Informatics, Sri Mulyani, and other ministers were included in the samples provided by the hackers.
Mount Merapi Erupts Twice, Spewing Hot Clouds Over Central Java
Teguh also shared a screenshot of the cybercriminal’s post on Breach Forums. The post, allegedly made by a user named “Bjorka” in September 2024, advertised the sale of 6.6 million records. The data was reportedly priced at USD $10,000, equivalent to approximately IDR 153.1 billion.
According to Teguh, the hacker released 10,000 sample records to showcase the quality of the data. Among the top 25 names listed were President Jokowi, his sons Gibran and Kaesang, as well as several government officials including Communications Minister Budi Arie Setiadi, Finance Minister Sri Mulyani Indrawati, and State-Owned Enterprises Minister Erick Thohir.
Falcon Feeds, a cybersecurity firm, also reported on the taxpayer data breach via its account on X. They highlighted that the stolen data from Indonesia’s Directorate General of Taxes (Ditjen Pajak) included sensitive personal information such as names, NIKs, NPWPs, addresses, emails, phone numbers, and birth dates.
“A forum member claims to have leaked data from the Directorate General of Taxes, the official Indonesian tax authority. The leaked data is reported to contain personal information such as names, NIKs, NPWPs, addresses, emails, phone numbers, and birth dates. Note: The authenticity of this claim has not yet been verified,” Falcon Feeds stated.
In response to the allegations, Dwi Astuti, Director of Public Relations at the Directorate General of Taxes under Indonesia’s Ministry of Finance, stated that the agency is investigating the matter.
(Raidi/Agung)
