{"id":4620,"date":"2026-08-30T20:06:27","date_gmt":"2026-08-30T20:06:27","guid":{"rendered":"https:\/\/cyberasia.io\/?p=4620"},"modified":"2026-08-30T20:45:00","modified_gmt":"2026-08-30T20:45:00","slug":"indonesian-tax-data-breach","status":"publish","type":"post","link":"https:\/\/cyberasia.io\/article\/data-leak\/indonesian-tax-data-breach\/","title":{"rendered":"Indonesian Tax Data Breach: 100,000 NPWP Records Dumped Online by K3LLLEAKERS, Is Anyone Safe?"},"content":{"rendered":"\n

An alarming Indonesian Tax Data Breach<\/span> has surfaced on the cyber underground after hacktivist threat group K3LLLEAKERS<\/span> publicly dumped a massive database containing over 100,000 detailed records allegedly exfiltrated from Indonesia’s Directorate General of Taxes (Direktorat Jenderal Pajak (pajak.go.id)<\/span>). The exposed archive contains deeply sensitive personal and financial identifiers, including national tax numbers (NPWP), full citizen names, complete residential street addresses, personal telephone numbers, email addresses, professional occupations, and real-time tax compliance statuses across all major Indonesian provinces.<\/p>\n\n\n\n

\"Indonesian
CyberAsia Threat Intelligence: Investigative breakdown of the massive 100,000-record database dump affecting Indonesian taxpayers and Direktorat Jenderal Pajak.<\/figcaption><\/figure>\n\n\n\n

The Anatomy of the Indonesian Tax Data Breach<\/h2>\n\n\n\n

The leak was broadcast via the threat actor’s official Telegram dispatch channel, where K3LLLEAKERS<\/span> posted direct download mirrors hosting a 100,002-line CSV file titled DATABASE_www.pajak.go.id.csv<\/code>. Unlike typical low-level scrapes that only aggregate publicly visible forum usernames, this Indonesian Tax Data Breach<\/span> presents structured government-tier database exports containing authenticated administrative tax parameters.<\/p>\n\n\n\n

CyberAsia researchers inspected raw sample fragments from the 100,000-line database dump. The schema structure indicates that the data was extracted from a consolidated internal taxpayer registry or regional tax service office (Kantor Pelayanan Pajak: KPP) management cluster, containing both individual taxpayers (Orang Pribadi<\/span>) and corporate entity accounts (Badan<\/span>). The revelation of this Indonesian Tax Data Breach<\/span> highlights persistent perimeter vulnerabilities in central financial repositories.<\/p>\n\n\n\n

\"K3LLLEAKERS
Figure 1: Official Telegram broadcast from K3LLLEAKERS declaring the exfiltration of the Directorate General of Taxes (pajak.go.id) database (Sensitive download link redacted by CyberAsia editors).<\/figcaption><\/figure>\n\n\n\n

Exposed Intelligence Fields: 100,000 Verified Citizen Records<\/h2>\n\n\n\n

A comprehensive forensic audit of the compromised dataset confirms the unprecedented scope of this Indonesian Tax Data Breach<\/span> across a 13-column relational database architecture. Every single row in the 100,000-line repository captures granular personally identifiable information (PII) and institutional tax profiling data:<\/p>\n\n\n

\n > COMPROMISED_DATA_RECORDS<\/strong>\n