Claim: Bengkulu tax portal backup was leaked

MediumBreachNo software to update

In 30 seconds

Alleged

A threat actor allegedly leaked a database backup linked to Pusako, Bengkulu Province's regional tax portal. The sole report describes 5.9 GB of data, but the material, its origin and any affected people remain unverified.

What happened

Alleged

DailyDarkWeb reported that an unidentified actor claimed to possess and release a backup associated with Pusako, a portal used for regional tax services such as vehicle-tax checks and service registrations. No direct evidence from the alleged archive is included in the supplied evidence batch.

Why it matters

Inferred

If authentic, records connecting identity, contact and tax information could make impersonation or tax-themed phishing more convincing. That risk is an analytical possibility, not proof that fraud has occurred or that the claimed data is genuine.

What to do

Inferred

Bengkulu's Regional Revenue Agency should privately obtain and validate a sample, determine whether it came from its systems, preserve relevant logs and notify affected users if exposure is confirmed. Portal users should independently verify unexpected tax or vehicle-payment messages and avoid sharing identity details through unsolicited links.

Confirmed and still uncertain

Observed

Known from the supplied batch: one X post documents the allegation and explicitly labels it unverified. Unknown: whether the archive exists as described, whether it belongs to Pusako, when any access occurred, how many people may be affected and whether officials are investigating.

What people are saying

Alleged

DailyDarkWeb says the alleged backup may contain names, phone numbers, national identity details and tax-administration data. It also says the contents have not been confirmed and reports no public agency statement, but the supplied batch provides no independent support for either point.

Evolution

Observed

The evidence currently captures only the initial public claim. There is no later update, technical validation, victim notice or official response in the supplied material, so the story has not progressed beyond an unverified allegation.

Reach

Observed

1 independent groups, 1 updates, and 1 engagements.

Technical detail

Observed

The report characterizes the material as a database backup rather than describing a verified intrusion method. It provides no confirmed vulnerability, access path, database schema, timestamps, hashes or forensic indicators that would independently connect the archive to Pusako.

Sources and evidence

Observed

The entire evidence batch consists of one DailyDarkWeb post on X with an attached image. There is no primary statement from Bapenda, authenticated data sample, forensic report or separate corroborating source, so attribution and impact should remain provisional.