Indonesia is the largest digital market in Southeast Asia, boasting around 202 million citizens that have access to the internet. Despite a persistent digital gap and issues in financial inclusion, Indonesia has seen an astonishing rise in domestic unicorns such as Gojek, Tokopedia, Bukalapak, Traveloka, and most recently, Ajaib. President Joko Widodo has been optimistic of Indonesia’s digital economy boom, claiming its fast growth would eventually become the largest in Southeast Asia within the next ten years.
Government services are also increasingly becoming digitalized. The tax filing system, for example, has almost been fully digitized, allowing citizens to file taxes without visiting the tax office. During the COVID-19 pandemic, government-issued vaccine certificates were also distributed online through the contact-tracing app, PeduliLindungi, in lieu of traditional paper certificates.
This massive drive towards digitalization, however, has yet to be accompanied with adequate cybersecurity measures. In July 2021, a group from VPN Mentor discovered vulnerabilities in the electronic Health Alert Card (eHAC) application which put the personal data of around 1.3 million Indonesians at risk. The application was developed during the Covid-19 pandemic as a tracing application for domestic and international travelers. The government’s response, however, leaves much to be desired. VPN Mentor contacted the Indonesian Ministry of Health twice in July 2021, but the ministry failed to respond. Another report was filed to the Indonesian Cyber Security Agency (BSSN), and following the report, the eHAC server was shut down. In September 2021, the police officially closed the investigation, citing a lack of evidence that a breach has occurred.Continue reading “Personal data security should be everyone’s concern”