Study On Sharia Bank Customer Data Leak Indonesia In 2023 : Perspective Of The Data Protection Law Personal No. 27 Of 2022

Authors

  • Febri Puji Lesmana Business Law, Bahaudin Mudhary University Madura, Indonesia Author
  • Moh. Wakid Faculty of economics and business, Bahaudin Mudhary Madura University, Indonesia Author
  • Ahmad Syauqi Bawashir Faculty of economics and business, Bahaudin Mudhary Madura University, Indonesia Author
  • Mohammad Ramdan Business Law, Bahaudin Mudhary University Madura, Indonesia Author
  • Rahmad Ready Kurniawan Faculty of economics and business, Bahaudin Mudhary Madura University, Indonesia Author

DOI:

https://doi.org/10.5281/zenodo.18126291

Keywords:

Digital Banking, Data Leakage, Cybersecurity, PDP Law, Bank Syariah Indonesia

Abstract

The development of digitalization in the banking sector has brought ease of access to financial services through digital banking, but it has also increased cybersecurity risks. In May 2023, Bank Syariah Indonesia (BSI) experienced a data leak incident due to a ransomware attack by the LockBit 3.0 group, which revealed weaknesses in the data security system and caused potential losses for customers. This study uses a juridical-normative method to analyze the implementation of the Personal Data Protection Law (PDP Law) No. 27 of 2022 in handling these cases. The results of the study show that BSI as a data controller has a legal obligation to maintain the security of customer data, as stipulated in Article 46 of the PDP Law. However, BSI's delay in providing notifications, lack of information transparency, and negligence in ensuring the protection of personal data indicate non-compliance with these regulations.

Downloads

Download data is not yet available.

References

Antara News. (2013). Citibank is investigating the theft of customer credit card data. https://www.antaranews.com/berita/365435/citibank-selidiki-pencurian-data-kartu-kredit-nasabah

Balqis Fallahnda. (2023). Chronology of LockBit Suspected of Stealing BSI Customer Data & Latest Update Chronology of the alleged theft of BSI data carried out by Lockbit. tirto.id. https://tirto.id/kronologi-lockbit-diduga-curi-data-nasabah-bsi-update-terkini-gHpm

CNN Indonesia. (2022a). Leaked Immigration, Consumer Loans, and Bank Data for Sale on Raid Forum. https://www.cnnindonesia.com/teknologi/20220114143428-185-746695/data-imigrasi-konsumen-pinjol-dan-bank-bocor-dijual-raid-forum

CNN Indonesia. (2022b). Bank Indonesia Data Leak Has Not Been Completed, Rising to 74GB. https://www.cnnindonesia.com/teknologi/20220124163634-185-750569/kebocoran-data-bank-indonesia-belum-selesai-naik-jadi-74gb

CNN Indonesia. (2023). Error Since Monday, the President Director of BSI apologizes and guarantees that customer funds are safe. CNN Indonesia. https://www.cnnindonesia.com/ekonomi/20230510184413-78-947935/error-sejak-senin-dirut-bsi-minta-maaf-dan-jamin-dana-nasabah-aman

Hanif Reyhan Ghifari. (2023). BSI Records the Number of Customers Reaches 19.2 Million Until September 2023. https://tirto.id/bsi-catat-jumlah-nasabah-capai-192-juta-hingga-september-2023-gRJy

International Telecommunication Union. (2018). https://www.itu.int/pub/D-STR-GCI.01-2018

Jonathan Jordan Sianipar & Marta Solavide Naibaho. (2024). WEAK SECURITY OF GOVERNMENT BANKS IN INDONESIA: A CASE STUDY OF BRI BANK HACKING AGAINST ITS CUSTOMERS. 1(6). https://doi.org/10.61722/jmia.v1i6.2935

Lavinda. (2023). BSI Urged to Be Transparent About Alleged Customer Data Leaks. katadata.co.id. https://katadata.co.id/digital/teknologi/6465c013bf465/bsi-didesak-transparan-soal-dugaan-kebocoran-data-nasabah

Nikita Dewi Kurnia Salwa. (2024). Major Challenges & Obstacles Faced by CSIRT-BSSN Indonesia. https://csirt.or.id/pengetahuan-dasar/tantangan-csirt-bssn

Article 1 paragraph 5, Law of the Republic of Indonesia Number 27 of 2022. https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022

Article 39 Paragraph 1, PDP Law No. 27 of 2022.

Article 46, Law of the Republic of Indonesia Number 27 of 2022.

Downloads

Published

2025-12-31

Issue

Section

Articles

How to Cite

Study On Sharia Bank Customer Data Leak Indonesia In 2023 : Perspective Of The Data Protection Law Personal No. 27 Of 2022. (2025). JULIAN: Journal of Law Education and Legal Science, 1(2), 69-76. https://doi.org/10.5281/zenodo.18126291

Similar Articles

You may also start an advanced similarity search for this article.