Govt Claims Leaked Taxpayer Data Not Authentic

Coordinating Minister for Political, Legal, and Security Affairs, Hadi Tjahjanto, argued that some leaked taxpayer identification number (NPWP) data is not authentic. He made this claim following a confirmation from the National Cyber and Crypto Agency (BSSN) regarding the alleged data breach.

“Initial analysis conducted by BSSN indicates that some of the purported leaked data are inconsistent with original records,” Hadi said during a work meeting with Commission I of the House of Representatives (DPR) at the Nusantara II Building in Jakarta on Monday, September 23, 2024.

As previously reported, it was suspected that six million NPWP data belonging to officials of the Directorate General of Taxes (DJP) of the Finance Ministry had been leaked online. The breach was attributed to a hacker known as Bjorka, who is believed to have obtained the data from various cities or districts. The leaked data includes that of President Joko Jokowi Widodo, Jokowi’s son and Vice President-elect Gibran Rakabuming Raka, Kaesang Pangarep, and other state officials.

Hadi suspected that Bjorka acquired both National Identification Numbers (NIK) and NPWP data from multiple locations, resulting in discrepancies between the data and its owners. He assured that his ministry would actively monitor the situation and collaborate with BSSN to address the data leak.

He also announced plans to convene a ministerial-level meeting involving the Finance Ministry's Directorate General of Taxes and BSSN to discuss the issue and develop mitigation strategies. “BSSN is also conducting a thorough investigation into the alleged cybersecurity incident that led to the data breach,” Hadi added.

Hadi further emphasized the need for the government to expedite the implementation of personal data protection measures, including the establishment of a personal data protection agency to enforce the Personal Data Protection Law (UU PDP). He proposed that ministries and agencies develop regulations to ensure the accuracy and validity of personal data, as well as promote responsible use of personal data protection practices among taxpayers. 

“This week, we will delve deeper into these matters. We will invite relevant ministries and agencies to participate in discussions,” Hadi concluded.