A man who worked at the customer service unit of state-owned telecommunication company Telkomsel stole personal data of social media sensation Denny Siregar.
He accessed personal data of Telkomsel customers.
The suspect is an outsourced worker at Grapari with limited access to the company’s data server.
The suspect took a picture of Denny’s personal data and published it on Twitter account @opposite6890.
Police charged him under the Electronic Information and Transaction (ITE) Law.
Source: https://jakartaglobe.id/news/telkomsel-employee-arrested-for-data-theft
TPRM report: https://scoringcyber.rankiteo.com/company/telkomsel
"id": "tel212216123",
"linkid": "telkomsel",
"type": "Data Leak",
"date": "07/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Telecommunications',
'location': 'Indonesia',
'name': 'Telkomsel',
'type': 'Telecommunication Company'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': True,
'type_of_data_compromised': 'Personal Data'},
'description': "An outsourced worker at Telkomsel's customer service unit "
'stole and published personal data of social media sensation '
'Denny Siregar.',
'impact': {'brand_reputation_impact': 'Negative',
'data_compromised': 'Personal Data',
'legal_liabilities': 'Electronic Information and Transaction (ITE) '
'Law'},
'motivation': 'Unauthorized Data Access and Disclosure',
'regulatory_compliance': {'legal_actions': 'Police charged the suspect',
'regulations_violated': 'Electronic Information and '
'Transaction (ITE) Law'},
'response': {'law_enforcement_notified': True},
'threat_actor': 'Insider',
'title': 'Data Breach at Telkomsel',
'type': 'Data Breach',
'vulnerability_exploited': 'Access Control'}