Something doesn't look right?

Indonesia National Data Center Data Breach Jun 2024

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

High

Organization

Indonesia National Data Center

Threat Actor

Brain Cipher

Actor Type

Ransomware Gang

Type of Breach

Unknown

News Timeline

Jul 14, 2024

Service Restored

Indonesia Restores 86 Public Services Post Cyberattack on Temporary National Data Center thecyberexpress.com - The June 20 cyberattack on Indonesia's Temporary National Data Center by the Brain Cipher ransomware disrupted 282 public services, but significant recovery efforts have restored 86 essential services...
Show more

Jul 08, 2024

Threat Actor Apologizes, Hands over Encryption Keys

Ransomware scum who hit Indonesian government apologizes, hands over encryption key theregister.com - Brain Cipher, the group responsible for hacking Indonesia's Temporary National Data Center, issued an unexpected apology and released a 54 kb ESXi encryption key to the government, although its effect...
Show more

Backtrack

Jul 01, 2024

Disaster Recovery

Indonesian government didn't have backups of ransomwared data, because DR was only an option theregister.com - Indonesia's President Joko Widodo has ordered an audit of government datacenters following the June 20th ransomware attack on the Temporary National Data Center (PDNS), which utilized a new variant of...
Show more

No backups

Jun 25, 2024

Refusal to pay

Indonesia won't pay an $8 million ransom after a cyberattack compromised the national data center abcnews.go.com - The Indonesian national data center was compromised by a LockBit 3.0 ransomware attack demanding an $8 million ransom, affecting over 200 government agencies. This incident highlights the vulnerabilit...
Show more

Initial Report

Jun 24, 2024

TTP and Status Update

Indonesia Says a Cyberattack Has Compromised Its Data Center but It Won’t Pay the $8 Million Ransom securityweek.com - Security researchers have been informed that the Indonesian national data center breach involved the deployment of Lockbit 3.0 ransomware, which has encrypted data and caused disruptions to over 200 g...
Show more

Initial Report

Organization Details

Organization Size

Unknown

HQ Location

Jakarta, Indonesia

Industry

Public Administration

Security Stack used by Indonesia National Data Center at time of breach (best approximation) Why?

Network Security

VPN/SASE

IDS/IPS

Endpoint Security

EDR

MDM

Identity Management

SSO / MFA

IGA

Application Security

WAF

SCA

Cloud Security

CASB

CWPP

SIEM / Threat Intel

SIEM

TIP

Not right? Contribute more accurate data

What is Indonesia National Data Center?

The Indonesia National Data Center (PNDA) is a governmental initiative aimed at consolidating various data management and processing activities across Indonesia. Designed to enhance the efficiency, security, and accessibility of both government and public data, this center plays a crucial role in su...
Show more

Learn more about recent incidents

9 / 10

Okta Oct, 2023