Anas Ma’ruf, a health ministry official overseeing data, said the government was looking into the potential data breach but said the potential flaw was in an earlier version of the app, which has not been used since July
In a Covid-19 test-and-trace app that left exposed personal information and the health status of 1.3 million people, Indonesia is investigating a suspected data breach (security flaw).
“Due to the lack of protocols put in place by the app’s developers”, researchers from encryption provider vpnMentor said personal information in the Indonesia Health Alert Card (eHAC) app, often required to be used by travellers, was accessible.
Anas Ma’ruf, a health ministry official overseeing data, said the government was looking into the potential data breach, but said the potential flaw was in an earlier version of the app, which has not been used since July.
“The eHAC from the old version is different from the eHAC system that is a part of the new app”, he said. “Right now, we’re investigating this suspected data breach”
The eHAC system is now part of the Peduli Lindungi (Care Protect) app, which the government has promoted for various tracing purposes, including entry at malls.
By urging people to delete the old app, Anas said the breach might have originated from a partner, without elaborating. He said the current eHAC system was now managed by the government and its safety was “guaranteed”.
VpnMentor researchers said the flaw could expose people to phishing or hacking, as well as discourage people from using a COVID-19 tracing app.
Experts say such data-breaches point to Indonesia’s weak cyber security infrastructure. In May, authorities also launched an investigation into an alleged data breach of social security data from the country’s state insurer.
Also read: CIO News interviews Shri Wangki Lowang, Minister (IT) of Arunachal Pradesh
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics.
CIO News also covers the professional journeys of CIOs across all industries through print articles.
