Brando Oloan

🇮🇩 INDONESIAN TAX AUTHORITY DATABASE ALLEGEDLY COMPROMISED — PASSWORDS AND AUTH TOKENS CLAIMED A threat actor has posted what they claim is a sample from a database associated with Indonesia’s Directorate General of Taxes (Pajak), part of the Ministry of Finance. The allegedly exposed fields include: * Taxpayer Identification Numbers (NPWP) * Names and email addresses * Phone numbers and physical addresses * Passwords * User IDs and account roles * IP addresses * Last-login information * Authentication tokens * Remember-me tokens * Account creation and update timestamps ⚠️ Analyst Note: The claimed exposure of authentication material is what makes this particularly important. If authentic and current, passwords and session/authentication tokens could potentially create risks beyond disclosure of taxpayer PII, depending on how the credentials and tokens are stored and whether they remain valid. However, the underground post is labeled as a “sample,” and we have not independently established the number of affected accounts, source system, password format, validity of the tokens or whether the material resulted from a direct compromise of Indonesia’s tax infrastructure. Indonesia’s official tax authority website remains operational, and we found no corresponding official breach disclosure as of September 19. Until technically validated, this should be treated as a significant Indonesian government data-leak claim — not confirmation that the country’s tax infrastructure has been compromised. #DDW #Indonesia #Pajak #Government #DataLeak #ThreatIntelligence