Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa.

Indonesia Refuses to Pay $8M Ransom After Cyberattack

More than 200 regional and national government agencies have been impacted by the ransomware attack, and few of them are once again operational.

Dark Reading Staff, Dark Reading

June 25, 2024

1 Min Read
Indonesian flag waving in the sky
Source: Peter Treanor via Alamy Stock Photo

A cybercrime group is demanding $8 million after compromising Indonesia's national data center — an amount the government is refusing to pay.

More than 200 government agencies have been disrupted by the cyberattack since June 20, according to Samuel Abrijani Pangerapan, director general of informatics applications with the Communications and Informatics Ministry. He told the Associated Press that these agencies are at both the regional and national levels, and though some of them have returned to operations (such as immigration at airports), others are still not yet operational. 

According to Herlan Wijanarko, Indonesia's director of network and IT solutions, the threat actors are holding data hostage and offering a key to access the information in exchange for the $8 million ransom.

Communication and Informatics Minister Budi Arie Setiadi, however, told the AP that the government will not pay the ransom. Instead the National Cyber and Crypto Agency is carrying out forensics as the center does its best to recover from the attack.

The head of the crypto agency also noted that it detected a sample of LockBit 3.0 ransomware.

"The disruption to the national data center and days-long needed to recover the system means this ransomware attack was extraordinary," said Pratama Persadha, Indonesia's Cybersecurity Research Institute chairman. "It shows that our cyber infrastructure and its server systems were not being handled well."

This is the most severe cyberattack on the country's government agencies and companies since 2017.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights