Passport is an official travel document issued by a government of an individual.
It contains a person's identity, including his/her full name, gender, photograph, place and date of birth, signature, passport number, as well as issued date and the expiration date of the passport.
And in Indonesia, where all Indonesian passports are issued by Directorate General of Immigration of Indonesia, about 34 million of its citizen’s passport data has been leaked and sold by Bjorka, a notorious hacker that had allegedly leaked several confidential government and citizens data back in 2022.
Bjorka who also claimed to have committed cybercrimes for their Indonesian friend in Warsaw, Poland, wrote on their website that the 4GB (1GB compressed) data holds a total of 34,900,867 passports, and that it was breached on July 2023.
"I just wanted to point out how easy it is for me to get into various doors due to a terrible data protection policy," Bjorka once tweeted on their now-defunct Twitter account.
According to Teguh Aprianto, a cybersecurity practitioner and the founder of Ethical Hacker Indonesia, the sample of 1 million data are valid with the year 2009-2020 timestamps.
In all, the hacker is selling the data for $10,000, which is equivalent to Rp150 million.
Buat yang udah pada punya paspor, selamat karena 34 juta data paspor baru aja dibocorkan & diperjualbelikan.
Data yg dipastikan bocor diantaranya no paspor, tgl berlaku paspor, nama lengkap, tgl lahir, jenis kelamin dll. Ini @kemkominfo sama @BSSN_RI selama ini ngapain aja ya? pic.twitter.com/p8ZlMi2fgo— Teguh Aprianto (@secgron) July 5, 2023
Previously, Bjorka had stolen over 1.3 billion Indonesian SIM card registration details and put them on sale on the dark web.
Bjorka has also been found to ridicule Indonesian political figures for increasing the price of fuel in the nation.
The incident of the price hike created a stir among the people.
The hacker joined Breach Forums in August 2022 and immediately started leaking stolen data of Indonesian citizens on the underground forum.
They leaked data allegedly from WattPad and Tokopedia. But in this case, it's worth noting that the websites were already breached in 2020.
Besides these, the hacker claimed to have leaked data from Telkom Indonesia, IndiHome, the Ministry of Communications and Information Technology, and the General Elections Commission among others.
Bjorka had also leaked personal information of Rafael Alun Trisambodo, an Indonesian corrupt official who previously served as the Head of the General Section of the Regional Office of the Directorate General of Taxes
The notorious hacker "Bjorka" has claimed to have leaked the passport information of 34 million people from Indonesia and is offering to sell it for $10,000. Additionally, there are many Indonesian passports leaked on the dark web. pic.twitter.com/3TnEPbci88
— Fusion Intelligence Center @ StealthMole (@stealthmole_int) July 5, 2023
