Cyber Attacks in Indonesia Could Paralyse Businesses for Longer Than Expected

JAKARTA, KOMPAS.com - Amid rapid digital transformation and the adoption of artificial intelligence (AI), cyber attack threats are no longer merely technical issues but business risks that can paralyse company operations for weeks.

The problem is that many companies remain overly optimistic about their system’s recovery capabilities following ransomware attacks or cyber incidents.

This finding was revealed by the global data security and resilience company, Commvault, in their latest “State of Data Resilience” report for the ASEAN region.

However, the reality on the ground is far different.

“The average recovery time for organisations in Indonesia is still around 28 days,” said Martin during a media briefing at Fairmont Jakarta, Central Jakarta, on Thursday (7/5/2026).

Nevertheless, Martin acknowledged there has been progress compared to the previous year. In Commvault’s study last year, the average recovery time for organisations in Indonesia was still 42 days.

Now, that figure has dropped to 28 days, although it remains higher than the global average of 24 days.

“The good news is that organisations are starting to take recovery technologies and processes more seriously. But 28 days is still too long for any business, and I am sure no company wants their data unrecovered for a month,” added Martin.

Commvault assesses that the slow recovery is driven by the increasing complexity of modern corporate digital infrastructure.

Currently, many companies no longer store data solely in internal data centres (on-premise), but also across various cloud services, SaaS (Software-as-a-Service) applications, edge computing, and user devices.

At the same time, data growth is surging due to AI usage.

Field CTO for Asia Pacific at Commvault, Gareth Russell, stated that 95 percent of organisations in Indonesia have now begun investing in AI.