This week Indonesia is the target of many data breaches.
A threat actor is selling databases containing more than 80 million Indonesian personal data on the dark web. Another is offering an Indonesian police database. Breaches like these fuel the dark web forums selling a wide variety of PII files.
Single or bundles of FULLZ (Full Information), credit cards, bank logins, etc. are available for as little as ten to a couple of thousand dollars. Anything needed to commit fraud can be purchased from hardware to identity theft.
The Indonesian government reacted to these data leaks last month by blocking access to the forum in question. Unfortunately, this is not effective as the government’s DNS-based blocklist is easily circumvented with a proxy or VPN.