Revisiting the Oversight of Data Centers After Cyberattack

Following a cyberattack that targeted several government entities in Indonesia, President Joko Widodo has mandated a review of the country’s data centers. This follows the revelation that a majority of the information stored in state data centers was not backed up, indicating a significant lack of oversight.

The recent ransomware attack, which began last week, is considered to be the most severe cyberattack in Indonesia in recent years, causing disruption to various government services, including immigration and operations at major airports. Over 230 public agencies, including ministries, have been affected by the attack. Despite demands for an $8 million ransom to retrieve the encrypted data, the government has refused to comply.

In response to the cyberattack, the state auditor has been instructed to conduct an audit of the country’s data centers. The audit will encompass governance and financial aspects and was announced by Muhammad Yusuf Ateh, head of Indonesia’s Development and Finance Controller (BPKP), after a cabinet meeting led by President Widodo.

One of the revelations following the cyberattack is that 98% of the government data stored in one of the two compromised data centers had not been backed up. Hinsa Siburian, an official from Indonesia’s cyber security agency, emphasized that the main problem is governance and highlighted the absence of data backup.

Nevertheless, some lawmakers have expressed skepticism about the explanation provided, with Meutya Hafid, chair of the commission overseeing the incident, labeling the lack of data backup as “stupidity.” The ongoing situation has sparked criticism of Indonesia’s communications minister, Budi Arie Setiadi, on social media as well.

Coinciding with this incident, Indonesian immigration officials have made a significant arrest of 103 Taiwan passport holders suspected of running a cybercrime operation on Bali island. The raid was reported to be the largest arrest this year, with authorities intending to deport the suspects.

In a statement, Taiwan’s foreign ministry confirmed that at least 14 of the individuals arrested were suspected of being Taiwanese. Furthermore, it has been requested that Indonesia send the suspects back to Taiwan once the investigation is completed.

It is clear that both the cyberattack and the cybercrime operation in Bali highlight the pressing need for more stringent oversight and security measures. The Indonesian government must take significant steps to enhance the protection of its data centers and prevent future cyber threats. Furthermore, collaboration with foreign counterparts, as demonstrated in the case of the Taiwanese suspects, is crucial in addressing cross-border cybercrime.

As cybercriminals continue to evolve their tactics, it is imperative for governments and relevant authorities to remain vigilant and proactive in safeguarding their digital infrastructure and data security. The repercussions of cyberattacks can be severe, making it essential for countries to invest in robust cybersecurity measures to protect their citizens and institutions.


Comments

Leave a Reply

Your email address will not be published. Required fields are marked *