Indonesia Enacts Cybersecurity Policy Amid Attacks

CRIL observed a sharp rise in data breaches targeting Indonesia in 2022, with multiple large datasets (e.g., IndiHome ~26M records, KOMINFO ~1.3B SIM registration records, alleged KPU ~105M citizens) and sensitive government and corporate data posted for sale on cybercrime forums; common attacker methods include SQL injection, exposed directories, misconfigurations, supply-chain vectors, and unpatched vulnerabilities, prompting the passage of Indonesia’s Personal Data Protection (PDP) Law.