What is the official website of BPJS Kesehatan ?

The official website of BPJS Kesehatan is https://www.bpjs-kesehatan.go.id.

What is BPJS Kesehatan's cybersecurity risk score?

BPJS Kesehatan has an AI-generated cybersecurity risk score of 742 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has BPJS Kesehatan experienced?

According to Rankiteo, BPJS Kesehatan currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has BPJS Kesehatan been affected by any supply chain cyber incidents ?

According to Rankiteo, BPJS Kesehatan has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does BPJS Kesehatan have SOC 2 Type 1 certification ?

According to Rankiteo, BPJS Kesehatan is not certified under SOC 2 Type 1.

Does BPJS Kesehatan have SOC 2 Type 2 certification ?

According to Rankiteo, BPJS Kesehatan does not hold a SOC 2 Type 2 certification.

Does BPJS Kesehatan comply with GDPR ?

According to Rankiteo, BPJS Kesehatan is not listed as GDPR compliant.

Does BPJS Kesehatan have PCI DSS certification ?

According to Rankiteo, BPJS Kesehatan does not currently maintain PCI DSS compliance.

Does BPJS Kesehatan comply with HIPAA ?

According to Rankiteo, BPJS Kesehatan is not compliant with HIPAA regulations.

Does BPJS Kesehatan have ISO 27001 certification ?

According to Rankiteo,BPJS Kesehatan is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does BPJS Kesehatan operate in ?

BPJS Kesehatan operates primarily in the Insurance industry.

How many employees does BPJS Kesehatan have ?

BPJS Kesehatan employs approximately 6,991 people worldwide.

Does BPJS Kesehatan own any subsidiaries ?

BPJS Kesehatan presently has no subsidiaries across any sectors.

How many LinkedIn followers does BPJS Kesehatan have ?

BPJS Kesehatan's official LinkedIn profile has approximately 44,247 followers.

What is the NAICS classification code for BPJS Kesehatan ?

BPJS Kesehatan is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does BPJS Kesehatan have a Crunchbase profile ?

No, BPJS Kesehatan does not have a profile on Crunchbase.

Does BPJS Kesehatan have a LinkedIn profile ?

Yes, BPJS Kesehatan maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bpjs-kesehatan.

How many cybersecurity incidents has BPJS Kesehatan experienced ?

As of August 16, 2026, Rankiteo reports that BPJS Kesehatan has experienced 1 cybersecurity incidents.

How many peer or competitor companies does BPJS Kesehatan have ?

BPJS Kesehatan has an estimated 15,668 peer or competitor companies worldwide.

What types of cybersecurity incidents has BPJS Kesehatan faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

BPJS Kesehatan

Boost Score +25 with badge (5 left)

742

/1000

Moderate

767

/1000

Fair

BPJS Kesehatan Vendor Cyber Rating & Cyber Score

go.id

Add Your Compliance Badge

BPJS Kesehatan, which stands for ‘Badan Penyelenggara Jaminan Sosial Kesehatan’ or Social Health Insurance Administration Body, is an authorized government body that was established to provide social health insurance program for Indonesian people.

BPJS Kesehatan A.I CyberSecurity Scoring

Scoring History

BPJS Kesehatan

BPJS Kesehatan CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

BPJS Kesehatan

Data Leak

05/2021

BPJ20123123

Loading…

A.I.

BPJS Kesehatan Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BPJS Kesehatan

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for BPJS Kesehatan in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for BPJS Kesehatan in 2026.

Incident Types BPJS Kesehatan vs Insurance Industry Avg (This Year)

No incidents recorded for BPJS Kesehatan in 2026.

Incident History - BPJS Kesehatan (X = Date, Y = Severity)

Loading…

SUBSIDIARY

BPJS Kesehatan Subsidiaries

Parent Company

BPJS Kesehatan

Insurance

Website: https://www.bpjs-kesehatan.go.id

Company Size: 5,001-10,000 employees

No subsidiary data available for this company.

Loading…

BPJS Kesehatan Similar Companies

FWD Insurance

fwd.com

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 34 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

Munich Re

munichre.com

Munich Re is one of the world’s leading providers of reinsurance, primary insurance and insurance-related risk solutions. The group consists of the reinsurance and ERGO business segments, as well as the capital investment company MEAG. We are globally active and operate in all lines of the insurance business. Since our founding in 1880, we’ve been known for our unrivaled risk-related expertise and sound financial position. We offer customers financial protection when faced with exceptional levels of damage – from the 1906 San Francisco earthquake to the 2017 Atlantic hurricane season. We possess outstanding innovative strength, which enables us to also provide coverage for extraordinary risks such as rocket launches, renewable energies, cyber attacks, or pandemics. We’re also playing a key role in driving forward the digital transformation of the insurance industry, and in doing so have further expanded our ability to assess risks and the range of services that we offer. Our tailor-made solutions and close proximity to our customers make Munich Re one of the world’s most sought-after risk partners for businesses, institutions, and private individuals. Working at Munich Re is more than a career. It’s an invitation to tackle some of the world’s most pressing challenges. Together with our team, consisting of specialists from more than 80+ fields of expertise, we turn risks into exciting opportunities that move humanity forward. https://www.munichre.com/en/career Munich Re Careers: [email protected] Munich Re Imprint: www.munichre.com/en/service/imprint/index.html Munich Re Legal Notice: https://www.munichre.com/en/service/legal-notice/index.html Munich Re Privacy Policy: https://www.munichre.com/en/service/privacy-statement/index.html By accessing the Munich Re LinkedIn page, you agree to LinkedIn's terms and conditions and its data use policy: www.linkedin.com/legal/privacy-policy © 2000–2018 Münchener Rückversicherungs-Gesellschaft Group Communications

Great Eastern

cb greateasternlife.com

For 117 years, we have been helping customers across generations by protecting, preserving and growing what matters to them. As One Great Eastern Group today, we are enabling the goals of over 15.5 million customers by taking care of their needs across life, health, wealth and general insurance, consistently innovating to help them #ReachforGreat!

AIG

aig.com

American International Group, Inc. (NYSE: AIG) is a leading global insurance organization. AIG provides insurance solutions that help businesses and individuals in approximately 190 countries and jurisdictions protect their assets and manage risks through AIG operations and network partners. Additional information about AIG can be found at www.aig.com | https://www.youtube.com/aig | https://twitter.com/aiginsurance | https://www.linkedin.com/company/aig/ | https://www.facebook.com/AIGInsurance | http://www.instagram.com/aiginsurance/ AIG is the marketing name for the worldwide property-casualty and general insurance operations of American International Group, Inc. All products and services are written or provided by subsidiaries or affiliates of American International Group, Inc. Products or services may not be available in all countries and jurisdictions, and coverage is subject to underwriting requirements and actual policy language. Non-insurance products and services may be provided by independent third parties. Certain property-casualty coverages may be provided by a surplus lines insurer. Surplus lines insurers do not generally participate in state guaranty funds, and insureds are therefore not protected by such funds. AIG Social Media Community Guidelines: https://www.aig.com/home/about/social-media-guidelines

Travelers

travelers.com

Travelers provides insurance coverage to protect the things that are important to you – your home, your car, your valuables and your business. We have been around for more than 170 years and have earned a reputation as one of the best property casualty insurers in the industry because we take care of our customers, agents, brokers, communities and each other. Every day, our approximately 30,000 employees and 13,500 independent agents and brokers in the United States, Canada, the United Kingdom and Ireland help provide peace of mind to our customers. Our expertise and focus on innovation have made us an industry leader and the only property casualty company in the Dow Jones Industrial Average. Our history of advancements has propelled our company, and our industry, to deliver higher standards – from writing the first auto and space travel policies to founding the Travelers Institute for public policy and launching a hybrid car discount. By minimizing risk, preventing loss and helping our customers prepare for the unknown, Travelers’ comprehensive products and services enable individuals and businesses to feel confident and secure about the future. Please see our Social Media Guidelines: www.travelers.com/about-travelers/social-media/guidelines.

Generali Italia

generali.it

Generali Italia è la grande realtà assicurativa nata dalla fusione di Generali, Ina Assitalia, Toro, Lloyd Italico e Augusta. Dall’unione di persone e competenze che hanno fatto la storia dell’assicurazione in Italia, è nata una Compagnia con radici solide che guarda al futuro, in grado di offrire soluzioni sempre più innovative ed efficaci. Coniughiamo l’attenzione alle esigenze degli assicurati, alla solidità patrimoniale, all’esperienza e all’eccellenza tecnica del Gruppo Generali per accompagnare e proteggere i tuoi progetti di vita. Essere più grandi vuol dire anche diventare più forti: con l’esperienza di oltre 40 mila Agenti presenti capillarmente su tutto il territorio italiano oggi proteggiamo oltre 10 milioni di clienti. La sede principale di Generali Italia S.p.A. è in Via Marocchesa 14, 31021 Mogliano, Veneto, Italia

Progressive Insurance

cb progressive.com

Every journey has a beginning, and wherever you are on your career path, we want to help you along the way. At Progressive, we exist to help people move forward and live fully. We strive to create a welcoming and flexible work environment for everyone, where employees are encouraged to risk, learn, and grow. With our supportive culture, work-life balance, and one of the largest contemporary art collections in the country, there’s a reason we’ve been named one of the best places to work. For over 80 years, Progressive has offered customers a wide range of insurance choices, including auto, home, renters, commercial auto, small business, motorcycle, boat policies, and more. Progressive is the second largest auto insurer in the country—a combined effort of every single person at Progressive. We’re a dynamic group of more than 65,000 talented employees—from all walks of life, all fields of business, and all 50 states. Everyone here plays a role in our success as we continue to help our customers move forward and live fully. With hundreds of career paths including Claims, Customer Care, Sales, Marketing, Legal, IT, Data Analysis, and more, you are sure to find the destination for your career at Progressive.

Aflac

aflac.com

Over 50 Million people worldwide have chosen Aflac because of our commitment to providing customers with the confidence that comes from knowing they have assistance in being prepared for whatever life may bring. With Aflac, whether you're a large business or a small one, you can provide your employees with the kind of benefits they’d expect from a bigger company, helping your business stand out from the crowd. Hundreds of thousands of businesses across the United States already make Aflac available to their employees—at no direct cost to their company. Choose from a wide range of products that can help your employees with health events—from accidents, to disability, to cancer, to life insurance. Your employees enjoy benefits from Aflac, all employee-paid. Please check out Aflac.com for more information.

Allianz Partners

allianz-partners.com

Allianz Partners is a world leader in B2B2C insurance and assistance, offering global solutions that span international health and life, travel insurance, automotive and assistance. Customer driven, our innovative experts are redefining insurance services by delivering future-ready, high-tech high-touch products and solutions that go beyond traditional insurance. Our products are embedded seamlessly into our partners’ businesses or sold directly to customers, and are available through four commercial brands: Allianz Assistance, Allianz Automotive, Allianz Travel and Allianz Care. Present in 75 countries, our 21,100 employees speak 70 languages, handle over 71 million cases each year, and are motivated to go the extra mile to offer peace of mind to our customers around the world. As part of the Allianz Group, we are proud to be the Worldwide Insurance Partner of the Olympic and Paralympic Movements. For more information, please visit: www.allianz-partners.com

Loading…

NEWS

BPJS Kesehatan CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 25, 2026 07:39 AM

Indonesia Cybersecurity Market Outlook: Trends, Drivers & Industry Growth Opportunities

Indonesia Cybersecurity Market is expanding rapidly, driven by digital transformation, rising cyber threats, and cloud adoption.

Read Article

July 22, 2024 07:00 AM

Indonesia needs to take hard decisions on its cybersecurity posture

The ransomware attack on Indonesia's national data centre has forced the Government to take hard decision on its cybersecurity posture.

Read Article

July 18, 2024 07:00 AM

BPJS Kesehatan to use AI to improve efficiency, healthcare services

BPJS Kesehatan (Indonesia's Social Security Agency for Health) is currently developing artificial intelligence (AI) technology to improve the National Health...

Read Article

October 05, 2022 07:00 AM

Sick of data leaks, Indonesians are siding with a hacker who exposed 1.3 billion SIM card details

Breaches are so common in Indonesia that citizens jokingly call it an “open-source country.”

Read Article

September 23, 2022 07:00 AM

Why cyber hackers have such big eyes for Indonesia

New and overdue legislation wholly falls to fill the gaping and expanding holes in Indonesia's cybersecurity defenses.

Read Article

September 03, 2021 07:00 AM

6 Major Data Breach Cases in Indonesia in Past 1.5 Years

Six data breach cases, both allegedly and confirmed, that happened in Indonesia for the past year and a half.

Read Article

June 07, 2021 04:37 AM

BPJS Kesehatan Massive Data Breach Investigation Update

Police investigation has yet found any significant pieces of evidence to uncover the alleged data breach on millions of BPJS Kesehatan participants.

Read Article

May 26, 2021 07:00 AM

Shoddy data protection in Indonesia threatens personal security of citizens

The personal information of nearly every man, woman, and child in Indonesia was posted online after the country's latest cybersecurity breach.

Read Article

May 22, 2021 07:00 AM

Personal Data Leaked Again

AFP/OLIVIER DOULIERY A "Cyber Security " sign is displayed in the window of a computer store on December 18, 2020, in Arlington, Virginia.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…