Indonesia was hit by a social security data breach which has put virtually all Indonesians exposed to digital attacks and frauds. Personal records of at least 100,000 individuals have been leaked from BPJS Kesehatan. The suspicion was based on records of social security number, office code, family records, and payment status. Even though the database did not contain sensitive data such as credit card details, with some personal data that exists, cybercriminals have more than enough to cause real damage and threats.