Anonymous Indonesia fufufafa Leak (2024)

On September 22, 2024, Anonymous Indonesia claimed responsibility for hacking the website of the Directorate General of Population and Civil Registration (Dukcapil), a government agency under the Ministry of Home Affairs. The group alleged that they had found evidence connecting Vice President-elect Gibran Rakabuming Raka to the controversial online account 'fufufafa,' which had been known for posting inflammatory and offensive content on social media. Anonymous publicly disclosed what they claimed to be Gibran's personal information, including a driver's license number. The operation was politically motivated, coming ahead of the 2024 Indonesian presidential inauguration. The incident raised significant concerns about the security of Indonesia's national population database.

Gibran Rakabuming Raka is the eldest son of Indonesian President Joko Widodo and was elected Vice President in 2024. The 'fufufafa' account was a controversial online persona known for posting divisive content. Anonymous claimed the account was linked to Gibran.

The breach targeted the Dukcapil website, suggesting web application vulnerabilities were exploited to access the population database. The specific method was not publicly detailed.

MITRE ATT&CK techniques

• T1190

Anonymous is a decentralized hacktivist collective. The Indonesia operation demonstrated the group's active presence in Southeast Asian political activism and its ability to politically embarrass high-level government officials.

Aliases

• Anonymous Indonesia

Attribution sources

• Anonymous Statements
• Suara.com
• Media Reports

Additional victims

• Gibran Rakabuming Raka (Vice President-elect)

Countries affected

• Indonesia

Data types

• Personal Information
• Driver's License Number
• Civil Registration Data

Reputational damage to the Indonesian government and Vice President-elect.

Public reaction

The leak generated significant political controversy in Indonesia, with supporters and opponents of the Vice President-elect debating the veracity of Anonymous's claims.

Political impact

The incident added to the political tension surrounding the 2024 Indonesian presidential transition and raised concerns about the security of the national population database.

The Indonesian government launched an investigation. No arrests were publicly reported.

Security improvements

• Indonesian government reviewed population database security.

Significance

The Indonesia fufufafa leak demonstrated Anonymous's continued relevance in Southeast Asian politics and the vulnerability of national population databases to hacktivist attacks.

Legacy

The incident highlighted the role of hacktivism in Indonesian electoral politics and the security challenges facing civil registration databases in developing nations.

Publishing organisations

• Anonymous Indonesia

Government investigated the breach. Data remained publicly accessible online.

References

1. [1]Suara.com reporting (Sep 2024)
2. [2]Anonymous Indonesia statements
3. [3]Indonesian media coverage