Cyberattack on Indonesian Airports and Data Centres Disrupts Services

In a major cybersecurity incident, Indonesian airports and state data centres have been targeted by the notorious Lockbit gang, leading to significant disruptions. The attack, which affected 44 state agencies, is considered one of the most severe cyberattacks in recent years in Indonesia.

Details of the Attack

The cyberattack, attributed to the Lockbit ransomware gang, demanded an $8 million ransom. However, the Indonesian government has refused to pay, opting instead to focus on restoring services and enhancing security measures. The attack led to widespread service interruptions, affecting various government operations and causing significant inconvenience to the public. President Joko Widodo has ordered an urgent audit of the affected data centres to address the vulnerabilities and prevent future incidents​ (Digital News Asia)​​ (Asia Financial)​.

Impact and Response

The cyberattack has highlighted critical gaps in Indonesia’s cybersecurity infrastructure. Many of the affected data centres were found to lack proper backup systems, exacerbating the impact of the attack. The government’s refusal to pay the ransom is a stance aimed at discouraging future attacks but has also led to prolonged service outages as systems are being meticulously restored and secured​ (Asia Financial)​​ (Digital News Asia)​.

Future Measures

In response to the attack, Indonesian authorities are implementing stringent measures to bolster cybersecurity across all government agencies. These measures include regular audits, enhanced backup systems, and comprehensive training for IT personnel to better respond to such incidents. The government is also considering collaboration with international cybersecurity experts to strengthen its defenses against future cyber threats​ (Digital News Asia)​.

Sources

1. Asia Financial
2. Digital News Asia
3. CybersecAsia