Indonesia — Cyber Threat Profile
By 2026, Indonesia has entered a period of strict enforcement for the Personal Data Protection (PDP) Law, which became fully actionable in late 2024. The Personal Data Protection Authority (PDPA) is now actively issuing administrative sanctions, including fines of up to 2% of annual revenue for non-compliance. The National Cyber and Crypto Agency (BSSN) is currently finalizing new regulations for 5G security and AI governance. Indonesia's strategy focuses on securing its massive digital economy and protecting critical infrastructure from regional ransomware trends. Organizations are now mandated to appoint Data Protection Officers and conduct regular audits, marking a significant cultural shift toward digital accountability.- National CERT/CSIRT: ID-SIRTII/CC
- World Cybercrime Index 2024 (origin significance): 1.17 / 100, #29 worldwide
- Secure Internet servers per 1M people (2024): 2,939.5 (source: World Bank)
- Internet users (2024): 72.8% of population (source: World Bank)
Threat actors targeting Indonesia
- Mustang Panda APT
- Naikon APT
- Sidewinder APT
- LockBit Ransomware · 8 incident(s)
- Nova Ransomware · 8 incident(s)
- Stormous Hacktivist · 5 incident(s)
- Coinbase Cartel Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- DragonForce Ransomware · 3 incident(s)
- Everest Ransomware · 3 incident(s)
- FunkSec Ransomware · 3 incident(s)
- Medusa Ransomware Ransomware · 3 incident(s)
- Panzer Ransomware · 3 incident(s)
- RansomHub Ransomware · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- KillSec Ransomware · 2 incident(s)
- Qilin Ransomware · 2 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- The Gentlemen Ransomware · 2 incident(s)
- Trigona Ransomware · 2 incident(s)
- World Leaks Ransomware · 2 incident(s)
- Deadlock Ransomware · 1 incident(s)
- Dire Wolf Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Icarus Ransomware · 1 incident(s)
- Meow Ransomware · 1 incident(s)
- NightSpire Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- ShadowByt3$ Ransomware · 1 incident(s)
- Triple X Ransomware · 1 incident(s)
- APT40 APT
- APT41 APT
- Salt Typhoon APT
Most targeted sectors
- Financial Services 13 incident(s)
- Agriculture & Food 10 incident(s)
- Energy & Utilities 9 incident(s)
- Government & Public Sector 8 incident(s)
- Technology 7 incident(s)
- Manufacturing 6 incident(s)
- Business & Professional Services 4 incident(s)
- Healthcare 4 incident(s)
- Retail & Consumer 3 incident(s)
- Education & Research 2 incident(s)
- Transportation & Logistics 2 incident(s)
- Chemical 1 incident(s)
Recent claimed incidents
- Dinas Komunikasi dan Informatika 2026-09-03 · Government & Defense
- PT Intraco Penta Tbk 2026-09-01 · Manufacturing
- Sinar Mas Agribusiness and Food Golden Agri-Resources) 2026-08-25 · Agriculture and Food Production
- PT Perusahaan Jamu Air Mancur 2026-08-22 · Agriculture and Food Production
- PT. Bank Perekonomian Rakyat Bintan 2026-08-22 · Financial Services
- Frisian Flag Indonesia 2026-08-20 · Agriculture and Food Production
- PT All Cosmos Biotek 2026-08-05 · Healthcare
- Surakarta University 2026-08-05 · Education
- pushidrosal.id 2026-08-04 · Other
- Pertamina 2026-07-31 · Energy & Utilities
- Vinilon 2026-07-25 · Manufacturing
- ID engineering 2026-07-24 · Manufacturing
- Koperasi Karyawan PT Aplikanusa Lintasarta 2026-07-21 · Telecommunication
- Koplarla 2026-07-20
- Rumah Sakit Universitas Indonesia (RSUI) 2026-07-20 · Healthcare