Indonesia — Cyber Threat Profile
By 2026, Indonesia has entered a period of strict enforcement for the Personal Data Protection (PDP) Law, which became fully actionable in late 2024. The Personal Data Protection Authority (PDPA) is now actively issuing administrative sanctions, including fines of up to 2% of annual revenue for non-compliance. The National Cyber and Crypto Agency (BSSN) is currently finalizing new regulations for 5G security and AI governance. Indonesia's strategy focuses on securing its massive digital economy and protecting critical infrastructure from regional ransomware trends. Organizations are now mandated to appoint Data Protection Officers and conduct regular audits, marking a significant cultural shift toward digital accountability.- National CERT/CSIRT: ID-SIRTII/CC
- World Cybercrime Index 2024 (origin significance): 1.17 / 100, #29 worldwide
- Secure Internet servers per 1M people (2024): 2,939.5 (source: World Bank)
- Internet users (2024): 72.8% of population (source: World Bank)
Threat actors targeting Indonesia
- Mustang Panda APT
- Naikon APT
- Sidewinder APT
- LockBit Ransomware · 8 incident(s)
- Nova Ransomware · 8 incident(s)
- Stormous Hacktivist · 5 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- DragonForce Ransomware · 3 incident(s)
- Everest Ransomware · 3 incident(s)
- FunkSec Ransomware · 3 incident(s)
- Medusa Ransomware Ransomware · 3 incident(s)
- RansomHub Ransomware · 3 incident(s)
- Coinbase Cartel Ransomware · 2 incident(s)
- KillSec Ransomware · 2 incident(s)
- Qilin Ransomware · 2 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- The Gentlemen Ransomware · 2 incident(s)
- Trigona Ransomware · 2 incident(s)
- World Leaks Ransomware · 2 incident(s)
- APT73 Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Icarus Ransomware · 1 incident(s)
- Meow Ransomware · 1 incident(s)
- NightSpire Ransomware · 1 incident(s)
- Panzer Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- Triple X Ransomware · 1 incident(s)
- APT40 APT
- APT41 APT
- Salt Typhoon APT
Most targeted sectors
- Financial Services 11 incident(s)
- Energy & Utilities 7 incident(s)
- Technology 7 incident(s)
- Agriculture & Food 6 incident(s)
- Government & Public Sector 4 incident(s)
- Manufacturing 4 incident(s)
- Business & Professional Services 3 incident(s)
- Retail & Consumer 3 incident(s)
- Education & Research 2 incident(s)
- Healthcare 2 incident(s)
- Transportation & Logistics 2 incident(s)
- Construction 1 incident(s)
Recent claimed incidents
- Surakarta University 2026-08-05 · Education
- PT All Cosmos Biotek 2026-08-05 · Healthcare
- pushidrosal.id 2026-08-04 · Other
- Pertamina 2026-07-31 · Energy & Utilities
- ID engineering 2026-07-24 · Manufacturing
- Koperasi Karyawan PT Aplikanusa Lintasarta 2026-07-21 · Telecommunication
- Koplarla 2026-07-20
- Rumah Sakit Universitas Indonesia (RSUI) 2026-07-20 · Healthcare
- Dephub 2026-07-19
- kliknklik.com 2026-06-23 · Consumer Services
- Bandung 2026-06-14
- Bni.co.id bank of indonesia free data. 2026-06-13 · Financial Services
- JEC Eye Hospitals and Clinics 2026-06-11
- Universitas Nasional 2026-06-06 · Education
- Badan Pangan Nasional 2026-05-29 · Agriculture and Food Production