Expert Responds to Alleged Indihome Data Leak Compromising 26 Million Users
Translator
Editor
23 August 2022 16:08 WIB
TEMPO.CO, Jakarta - A cybersecurity and digital forensic expert at Vaksincom Alfons Tanujaya on Tuesday responded to the alleged data leak of 26 million customers of internet service provider Indihome.
He likened the data leak from its respective server to air escaping in a tire leak situation. He asserted that despite new air being pumped inside the new tire, the old air will remain outside.
“Just because the air does not have color does not mean that [the escaping air] will not have an effect on the surrounding air,” said Alfons in a written statement on Tuesday, August 23.
He also lamented the fact that once data gets leaked out of the server, it will enable others to make copies over and over again. “Even though the cause of the leak had been fixed, leaked data cannot be returned and will exist on the internet indefinitely.”
In the event of a data leak, there is no point in punishing the data manager if the data manager is not aware of their mistake because this will certainly happen again. He made it clear that the ones who suffer the most from each data leak are the data owners and not the data manager.
"If the leaked data is a credential, perhaps mitigation such as changing the password or activating Two Factor Authentication (TFA) can be done and effectively counteract the negative effects for the data owner, as long as it is announced immediately and the owners are aware of this," he said.
Meanwhile, VP Network/IT Stra, Tech and Architecture Telkom, Rizal Akbar, stated that so far the state-telecommunication firm has stored the personal data and browsing history of IndiHome customers in a protected manner. The two data are also certainly never stored side by side.
The storage, said Rizal, was carried out in accordance with the order of the law which obliges telecommunication service providers to store conversation details including browsing history.
The obligation to store customer data is stated in Telecommunication Law no. 36/1999 and PP 71/2019 concerning Electronic System Operation.
MOH KHORY ALFARIZI
Click here to get the latest news updates from Tempo on Google News
