Indonesia — Cyber Threat Profile
By 2026, Indonesia has entered a period of strict enforcement for the Personal Data Protection (PDP) Law, which became fully actionable in late 2024. The Personal Data Protection Authority (PDPA) is now actively issuing administrative sanctions, including fines of up to 2% of annual revenue for non-compliance. The National Cyber and Crypto Agency (BSSN) is currently finalizing new regulations for 5G security and AI governance. Indonesia's strategy focuses on securing its massive digital economy and protecting critical infrastructure from regional ransomware trends. Organizations are now mandated to appoint Data Protection Officers and conduct regular audits, marking a significant cultural shift toward digital accountability.- National CERT/CSIRT: ID-SIRTII/CC
- World Cybercrime Index 2024 (origin significance): 1.17 / 100, #29 worldwide
- Secure Internet servers per 1M people (2024): 2,939.5 (source: World Bank)
- Internet users (2024): 72.8% of population (source: World Bank)
Latest Indonesia coverage
- Android trojan clones your bank app to dodge fraud checks 2026-09-09 · Cyber Incidents
Threat actors targeting Indonesia
- Mustang Panda APT
- Naikon APT
- Sidewinder APT
- LockBit Ransomware · 8 incident(s)
- Nova Ransomware · 8 incident(s)
- Stormous Hacktivist · 5 incident(s)
- Coinbase Cartel Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- N0n Ransomware · 4 incident(s)
- RansomHouse Ransomware · 4 incident(s)
- DragonForce Ransomware · 3 incident(s)
- Everest Ransomware · 3 incident(s)
- FunkSec Ransomware · 3 incident(s)
- Medusa Ransomware Ransomware · 3 incident(s)
- Panzer Ransomware · 3 incident(s)
- RansomHub Ransomware · 3 incident(s)
- The Gentlemen Ransomware · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- KillSec Ransomware · 2 incident(s)
- Qilin Ransomware · 2 incident(s)
- Trigona Ransomware · 2 incident(s)
- World Leaks Ransomware · 2 incident(s)
- Deadlock Ransomware · 1 incident(s)
- Dire Wolf Ransomware · 1 incident(s)
- DYSPHOR1A Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Icarus Ransomware · 1 incident(s)
- Meow Ransomware · 1 incident(s)
- MetaEncryptor Ransomware · 1 incident(s)
- NightSpire Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- ShadowByt3$ Ransomware · 1 incident(s)
- Triple X Ransomware · 1 incident(s)
- APT40 APT
- APT41 APT
- Salt Typhoon APT
Most targeted sectors
- Financial Services 13 incident(s)
- Energy & Utilities 12 incident(s)
- Agriculture & Food 10 incident(s)
- Government & Public Sector 9 incident(s)
- Technology 7 incident(s)
- Manufacturing 6 incident(s)
- Transportation & Logistics 6 incident(s)
- Business & Professional Services 5 incident(s)
- Healthcare 4 incident(s)
- Retail & Consumer 3 incident(s)
- Education & Research 2 incident(s)
- Chemical 1 incident(s)
Recent claimed incidents
- April Asia (port agency operations) 2026-10-12 · Transportation
- ILCS Pelindo (port logistics operations) 2026-10-12 · Transportation
- GlobalNet LCL (port agency operations) 2026-10-12 · Transportation
- Samudera (coastal shipping operations) 2026-10-12 · Transportation
- PT Indo Tambangraya Megah 2026-10-02 · Energy & Utilities
- Solaria 2026-09-30 · Energy & Utilities
- PKF Hadiwinata 2026-09-25 · Professional Services
- Pertamina 2026-09-17 · Energy & Utilities
- Dinas Komunikasi dan Informatika 2026-09-03 · Government & Defense
- PT Intraco Penta Tbk 2026-09-01 · Manufacturing
- Sinar Mas Agribusiness and Food Golden Agri-Resources) 2026-08-25 · Agriculture and Food Production
- PT Perusahaan Jamu Air Mancur 2026-08-22 · Agriculture and Food Production
- PT. Bank Perekonomian Rakyat Bintan 2026-08-22 · Financial Services
- Indonesian Police Database 2026-08-20 · Government & Defense
- Frisian Flag Indonesia 2026-08-20 · Agriculture and Food Production