A Threat Actor Claims to be Selling the Data of IDNIC

💡This post is part of Free Post Friday! If you're not a paid subscriber to the platform, these are some of the details you would see if you were a paid subscriber!

QUICK FACTS
🔗 DarkWebInformer.com - Cyber Threat Intelligence
📅 Date: 2025-01-24 14:05:13
🚨 Title: Alleged Database Sale of IDNIC
🛡️ Victim Country: Indonesia
🏭 Victim Industry: Network & Telecommunications
🏢 Victim Organization: IDNIC
🌐 Victim Site: idnic.id
📜 Category: Data Breach
🔗 Claim: https://breachforums.st/Thread-Indonesia-Network-Information-Center-idnic-id-Information-Disclosure-Database
🕵️‍♂️ Threat Actor: thv
🌍 Network: Openweb

WhiteIntel.io Data Leak Information

Description

The threat actor "thv" claims to have leaked a significant dataset from IDNIC (Indonesia Network Information Center). IDNIC is responsible for administering IP address allocations in Indonesia. The alleged breach includes:

• Data Type:
  • Maintainer Details: mntner, descr, admin-c, tech-c, upd-to, auth, mnt-by, referral-by
  • Personal Details: Names, addresses, phone numbers, fax numbers, and email addresses
  • Metadata: Last-modified dates, NIC handles, source information
• Size of Dataset:
  • File Type: .txt
  • File Size: 29.6 MB
  • Lines of Data: 1,000,518

The dataset contains sensitive information that could be exploited for various malicious purposes, including social engineering and targeted phishing campaigns.

Implications

For IDNIC:

• Regulatory Non-Compliance: This breach could lead to violations of Indonesia's Personal Data Protection Law (PDP), resulting in potential penalties.
• Operational Risks: The exposure of maintainer and administrative information could lead to unauthorized access or tampering with IP allocations.
• Reputation Damage: Trust in IDNIC's ability to manage and safeguard critical infrastructure data could be significantly impacted.

For Affected Individuals:

• Identity Theft: The exposure of personal information increases the risk of identity fraud.
• Social Engineering: Leaked contact details could facilitate phishing or impersonation scams.
• Privacy Violations: Unauthorized sharing of personal information infringes on individual privacy rights.

Recommendations

For IDNIC:

• Incident Response:
  • Validate the authenticity of the breach and assess its full scope.
  • Notify affected individuals and authorities as mandated by data protection laws.
  • Secure and review current systems to identify and mitigate vulnerabilities.
• Preventative Measures:
  • Implement robust encryption protocols to protect sensitive data.
  • Conduct regular cybersecurity audits and enhance employee training programs.
  • Use multi-factor authentication (MFA) for all administrative accounts.

For Affected Individuals:

• Stay Alert:
  • Be cautious of unsolicited communications requesting sensitive information.
• Secure Online Presence:
  • Update passwords and enable MFA on all critical accounts.
• Monitor for Fraud:
  • Regularly review financial and personal records to detect any unauthorized activity.

Stay tuned to DarkWebInformer.com for updates on this and other cyber threat incidents.