Bjorka group sells millions of Indo passports on the dark web

The Bjorka group sells the information of about 35 million Indonesian passport holders on the dark web for $10,000. The group is notorious for criticising the Indonesian government and publishing damaging information about the country’s political figures on social media platforms.

An Indonesian security researcher revealed on one social media platform that a hacker had published the Indonesian passport holder’s information, including their full names, dates of birth, gender, passport numbers and passport expiration dates.

The attacker shared a sample of about one million data records to prove that the information was legitimate. The threat actor’s post revealed that the data dump is about four gigabytes worth of documents available for $10,000.

 

The Indonesian government said they will start an investigation into the incident caused by the Bjorka group.

 

Based on reports, the Indonesian government are investigating an attack that allegedly relates to the Bjorka threat group. The attack could have been the cause of the loss of about 34.9 million Indonesian information.

Indonesian researchers have yet to conclude the validity of this massive leak of personal data theft.

On the other hand, the government will still conduct a more in-depth investigation into the reported data leak and publish its findings soon. Additionally, the ministry is coordinating with a third-party security researcher to address the incident.

Indonesia’s Ministry of Communications and Informatics requests that all personal data managers and digital platform providers improve their security to safeguard their users’ information. These improvements will also comply with the country’s applicable personal data protection provisions and ensure the safety of electronic systems.

The Bjorka group is a notorious Indonesian hacktivist gang that became famous in September last year after stealing the data of more than 1.3 billion SIM cards’ data from the Indonesian Ministry of Communication and Information Technology servers.

The group published the stolen data, like the recent events that affected Indonesian passport holders. The hacktivist group could also be the culprit behind the theft of the personal data of about 17 million customers of PLN in August last year.