Polri · Breach

Threat actor claims leak of Indonesian National Police officer data

· 1 min read

A threat actor posted on a dark web forum a sample it claims are records of Indonesian National Police (Polri) officers, with names, ranks, units such as Reskrim, phone numbers and ID-style numbers. The claim has not been independently verified and no record count was given. If authentic, the data expose officers to doxxing, harassment, impersonation and targeted phishing.

WhatsApp LinkedIn X
LowBreachNo software to update
In this article
  1. What happened
  2. Why it matters
  3. What to do
  4. For the technical team
  5. Timeline
  6. Sources

What happened

A threat actor posted on a dark web forum a sample it claims is data on members of Indonesia's National Police (Polri), framed as a protest against the government and police. The sample shows names, ranks, units such as Reskrim, phone numbers and ID-style numbers. The claim is unverified and no record count was given.

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Why it matters

If the data is authentic, officers are exposed to doxxing, harassment, impersonation and targeted phishing. DailyDarkWeb notes a separate small 'Polri' archive surfaced on another forum last week, so the data may be recycled or partial. There is no confirmation of a breach of Polri systems.

What to do

Track forums for follow-up posts and check whether institutional data appears in the sample. Brief police personnel on contact attempts by phone or email using this data. Treat it as an unverified claim until official confirmation.

For the technical team

Affected
Polri (Polícia Nacional da Indonésia); amostra alegada de registros de policiais com nomes, patentes, unidades (como Res · Polri (Indonesia National Police); visible sample with names, ranks, units (Reskrim), phone numbers and ID-style numbers. The listing mentions emails and usernames not shown in the capture.
Exploitation
Unverified claim reported by DailyDarkWeb. No record count given. No intrusion or exploitation technique reported.
Fix
Not applicable; alleged leak, no fix.
Vector
Alleged data leak posted on a dark web forum in a hacktivist-style post; the sources do not describe how the data was obtained.
More details
The post mixes a protest photo and taunting text with the data sample, matching hacktivist messaging aimed at Indonesian authorities, per DailyDarkWeb. A separate small 'Polri' archive surfaced on another forum last week; these may be recycled or partial datasets. No confirmation of a breach of Polri systems.

Timeline

  1. First mention: forum post alleges exposure of Polri officer data.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how. After signing up you get the full feed.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click