Issues of Bank Data Leaks on the 'Dark Web': IT Security Practitioners Weigh In
Recent allegations regarding data leaks on the dark web involving several banking institutions have sparked widespread public concern. However, cybersecurity practitioner Syahraki Syahrir has advised the public not to be excessively worried, noting that information technology (IT) security systems within Indonesia’s banking sector are among the most mature compared to other industries.
The CEO of Veda Praxis stated that the banking industry is under rigorous supervision by various regulators, ensuring that digital security standards are regularly updated. “Supervision of the financial industry is conducted in multiple layers by various agencies, such as the Financial Services Authority (OJK), Bank Indonesia (BI), the National Cyber and Crypto Agency (BSSN), and the Ministry of Communication and Digital,” Syahraki said in a written statement.
Syahraki added that the banking sector is one of the most mature industries in managing IT security because it involves the protection of customer funds and data. He urged the public not to panic, explaining that the dark web is an unindexed part of the internet often used for unregulated activities, including the spread of illegal or unverified data.
“Even if the data on the dark web is authentic, the source must first be traced. It could originate from a third party connected to bank services, rather than the bank’s core system,” said Syahraki, often referred to as Raki. He explained that in the modern digital ecosystem, banking systems are interconnected with various technology providers, infrastructure, and business partners. Therefore, the presence of data on the dark web does not automatically imply a weakness in a bank’s core systems. “However, when a bank is reported to have leaked data, the public becomes alarmed because it concerns their money,”
Separately, the Chair of the OJK Board of Commissioners, Friderica Widyasari Dewi, reminded the public to maintain the confidentiality of their personal data to prevent cybercrime in the financial sector. Friderica noted that despite the multi-layered security systems implemented by banks and compliance with personal data protection regulations, crimes can still occur if customers are not vigilant or negligent in protecting their private information.