Database of BPK RI is Leaked

In a hacker forum monitored by SOCRadar, a new alleged database leak is detected for BPK RI.

BPK.go.idIn April 2024, more than 700K+ rows of data from the store company BPK.go.id was posted to a popular hacking forum, Size 200 MB, we get unbiased dataformat: csvdata:

04/2024rows: 735574"","pengadaan_paket_jenis","pengadaan_paket_ta","repo_url","repo_nama","pengadaan_kodetender","pengadaan_nama","pengadaan_instansi","pengadaan_satuankerja","pengadaan_nilaipagu","pengadaan_nilaihps","pengadaan_jenis","pengadaan_tanggalpembuatan","pengadaan_sistem","pengadaan_lokasipekerjaan","pengadaan_pesertapemenang","pengadaan_pesertapemenang_nilaipenawaran",Sample :"","pengadaan_paket_jenis","pengadaan_paket_ta","repo_url","repo_nama","pengadaan_kodetender","pengadaan_nama","pengadaan_instansi","pengadaan_satuankerja","pengadaan_nilaipagu","pengadaan_nilaihps","pengadaan_jenis","pengadaan_tanggalpembuatan","pengadaan_sistem","pengadaan_lokasipekerjaan","pengadaan_pesertapemenang","pengadaan_pesertapemenang_nilaipenawaran",>

"1","TENDER","2021","http://****************","LP********bungan","74*******14","Pengad********************gkapan Jalan***********. Muara Bungo - B*************/Kab. Mer************n Perhubu*********alai Pen***********ortasi Dar***************mbi",35499*************"Pekerjaan K**************21-01-02***********- P>"2","TENDER","2021","http://****************","LP********bungan","74*******14","Pengad********************gkapan Jalan***********olangun - Bts. Pr*************ementeria************lai Penge*********nsportas***********ah V Provi***************882475,"Pe*************i",2021-01-0**************ascakual***********atu>"3","TENDER","2021","http://****************","LP********bungan","74*******14","Pemoto********************unan Runway ***********n Longsor Tahap I************* Perhubun************ BETO AMB*********UTON",21***********54532150,"***************21-01-03,"*************lifikasi Sat**************a Terend*********** Gu>"4","TENDER","2021","http://****************","LP********bungan","74*******14","Pengad********************gkapan Jalan***********n Sebidang di Pro*************at","Keme************n","BALAI*********LA TRANS*********** WILAYAH I***************BARAT",237*************2,"Pekerjaan**************2021-01-***********r ->"5","TENDER","2021","http://****************","LP********bungan","74*******14","Pengad********************gkapan Jalan***********lung - Bts. Kab. *************terian Pe************Pengelola*********rtasi Da*********** Provinsi ***************6545,"Peke*************,2021-01-03,**************cakualif***********u F>"6","TENDER","2021","http://****************","LP********bungan","74*******14","Pengad********************gkapan Jalan***********. Kab. Tanjab - S*************nterian P************ Pengelol*********ortasi D***********V Provinsi***************10590,"Pek*************",2021-01-03**************scakuali***********tu >"7","TENDER","2021","http://****************","LP********bungan","74*******14","Pengad********************gkapan Jalan***********. Kab. Batanghari*************un - Pauh************hubungan"*********Pengelol***********i Darat Wi***************784679800,*************aan Konstruk**************1,"Tende***********kua>"8","NONTENDER","2019","http****************id/eproc4","LP********aten A*******t","165********************mbangunan/Pe***********inase","Pemerinta*************aten Aceh************ERJAAN UM*********ENATAAN ***********H BARAT",1***************Konsultans*************,NA,NA,NA,NA,NA,NA"9","NONTENDER","2021","http****************d/eproc4","LPS********ogor",*******","Bela*******r","Pemeri*************,"BADAN P***********000000,110*************aan Baran************gadaan La*********" Jl. Pemud*************ogor - Bogor (Kota) ",NA,NA,NA,NA"10","NONTENDER","2021","htt****************id/eproc4","LP********Bogor"*******3","Pen*******ralatan da*************"Pemerint***********,"DINAS TE*************232700,56************Barang",2*********1,"Peng************ng"," Jl. D**********33 Bog********gor (Kota) >"11","NONTENDER","2021","htt****************id/eproc4","LP********Bogor"*******3","Bel*******Bahan untu*************Tulis Kan***********ah Kota Bo*************RIWISATA ************335900,51*********Pengada************021-02-************ngsung"," Dinas Par***************ta Bogor - Bo>"12","NONTENDER","2019","htt****************.id/eproc4","L********paten *******at","21*******ngawasan",*************paten Ace***********GGULANGAN *************",6000000************sultansi *********aha",NA************,NA,NA"13","NONTENDER","2019","htt****************.id/eproc4","L********paten *******at","19*******mbangunan *************,"Pemerin***********Ac*****rat*************JAAN UMUM************G KAB ACE*********,200000************0,"Peke************NA,NA,NA,NA,NA

Nature of Dark Web News:

• The news article reports the alleged leak of a database belonging to BPK RI (Badan Pemeriksa Keuangan Republik Indonesia), the Indonesian Supreme Audit Institution. The leaked data includes over 700,000 rows of information related to government procurement processes.

Key Insights:

• Sensitive Data Exposed: The leaked database contains highly sensitive information, including procurement details, tender documents, and financial data. This information could be exploited by malicious actors to compromise government systems, manipulate procurement processes, or commit fraud.
• Supply Chain Risk: The leaked data may also expose vulnerabilities in the supply chain of government contractors. Malicious actors could use this information to target contractors and gain access to sensitive government systems or data.
• Reputational Damage: The leak of such sensitive data can severely damage the reputation of BPK RI and the Indonesian government. It could undermine public trust and make it difficult for the government to conduct business effectively.

Mitigation Strategies:

• Strengthen Data Security: Implement robust data security measures, including encryption, access controls, and regular security audits, to protect sensitive data from unauthorized access.
• Monitor Dark Web: Regularly monitor dark web forums and marketplaces for any mention of leaked data or potential threats to the organization.
• Educate Employees: Train employees on cybersecurity best practices, including the importance of protecting sensitive data and reporting suspicious activity.
• Collaborate with Law Enforcement: Report any suspected data breaches or cyber threats to law enforcement agencies for investigation and prosecution.

source : SOC Radar