Indonesia’s Civil Aviation Data Breached? Hacker Claims Access to Employees, Flight Data

### Executive summary A threat actor using the alias “Hacker Mail” claimed on BreachForums to have exfiltrated over 3GB of data from Indonesia’s Directorate General of Civil Aviation (DGCA), allegedly including employee credentials, ID photos, pilot certificates, login logs, and flight-related data; the report includes sample records but notes the DGCA website was operating normally and officials had not confirmed the breach. The article also contextualizes the claim amid other recent incidents in Indonesia — a LockBit 3.0 ransomware attack on the national data center that disrupted government services and separate alleged breaches of military and police systems — raising concern but leaving the DGCA claim unverified.