BSSN Urges Vigilance After Old Leaked Data Reappears Online

RRI.CO.ID, Jakarta - The National Cyber and Crypto Agency (BSSN) has confirmed that personal data recently circulating online and described as a new data breach did not originate from a new incident, but rather from previous data leaks.

Deputy for Government and Human Development Cybersecurity and Cryptography at BSSN, Sulistyo, said preliminary analysis showed that the data was a compilation of publicly available information and data from several previous breaches.

According to him, the data was later reassembled and recirculated by certain parties.

"As soon as this information emerged, our team immediately conducted an analysis. The preliminary findings show that the circulating data did not originate from a new breach. It is a compilation of various publicly available information and data from previous breaches that has been reassembled and redistributed by certain parties," Sulistyo said in a statement issued in Jakarta on Monday, Oct. 5, 2026, as quoted by Antara.

Although the data did not stem from a new breach, BSSN is continuing to follow up on its circulation. The agency is coordinating with the Ministry of Communication and Digital Affairs and law enforcement authorities to trace the source and channels used to distribute the data.

"We share the same view as the Ministry of Communication and Digital Affairs. Although this is old data, we do not take it lightly. Data that has previously been exposed can still be misused if it is traded again. Therefore, tracing and enforcement efforts will continue," said Sulistyo, who also serves as chairman of the Government Cyber Incident Response Team (Gov-CSIRT).

BSSN also urged the public not to share screenshots, posts, or excerpts containing anyone's personal data, including public officials'.

"Personal data remains personal data, regardless of who owns it, their social or economic background, or whether it has previously circulated as part of publicly available information. Every time we share it again, we prolong the risk. Let us safeguard the digital space together by not helping it go viral," Sulistyo said.

The agency also urged the public to take several simple steps to protect their accounts and personal data, including changing passwords for important accounts, especially if they have used the same password for a long time or across multiple services.

BSSN further encouraged users to create different passwords for each account, use a password manager, and enable multi-factor authentication (MFA) for email, social media, and financial services accounts.

The public is also advised to be cautious of phone calls, messages, or links claiming to come from official institutions and requesting one-time passwords (OTPs) or personal information. BSSN urged people to avoid services or bots that offer "data checks" or facilitate the buying and selling of personal data, as well as to refrain from uploading personal data on social media.

"Cybersecurity is a shared responsibility. The government continues to strengthen system protection and enforcement measures. Simple habits such as changing passwords, enabling two-step verification, and refraining from uploading personal data serve as a crucial first line of defense," Sulistyo said. ***