Cybersecurity incident in Indonesia: the PDN(S) incident

Here is just a brief of information that I got from the recent incident at the Pusat Data Nasional Sementara, Indonesia

[@kingshadroun4141]

Its crazy what you saying --- meaning that hypervisor is not even patched or secured, no VLAN and related structure to isolate with firewalls or other platform the virtual machines etc.. its the fault of telkom the owner of the data center and not the government

[@budirahardjo7381]

yeah ...

[@saluran1733]

And the worst thing is one of the staff from Telkom sigma leaked the confidential document publicly on scribd containing username and password to access the servers
Apparently the password is admin#1234

[@mlc1610]

In meeting with DPR Menkominfo said that Backup system is working, but need to operate manually by kementrians.
Example: Kementrian Pendidikan want to backup their data, so they need to send ticket to telkom, and then telkom execute backup program/service. There's no auto backup or scheduled backup system or something, I don't know why, stupidity maybe. So the problem is all data are gone, no backup.

[@budirahardjo7381]

if the problem was originated from the kementrian side, I could understand. but the problem was from the provider side. this is just not right. (see my next video, but in Bahasa Indonesia): th-cam.com/video/Zgtw3R-VxOs/w-d-xo.html

[@ghucxty]

@@mlc1610 Why they're need so many agreement? Just back up their data and you have to send a ticket first? And their ticket needs to be verified so Telkom could execute the backing up process? And somehow they said the problem is tata kelola? What is this? Dufan?

[@ghucxty]

What an absurd national case. What a poor coutry we're living in.

[@budirahardjo7381]

other countries have had incidents also

[@ghucxty]

@@budirahardjo7381 yes sir, but at least they had their data backed up, even for 1%. Not like us, cadangin data aja harus mikir 7 keliling.