Business Context and Reporting Period
This Form 6-K filing by Perusahaan Perseroan (Persero) PT Telekomunikasi Indonesia Tbk (Telkom Indonesia) covers the month of June 2024, with the report dated June 26, 2024. The filing discloses a material fact regarding a cyber security incident affecting the National Data Center (PDNS) operated by a Telkom Group consortium for the Ministry of Communication and Informatics (MoCI).
Key Financial Metrics
The filing text does not provide specific financial values for revenue, profit, cash flow, margins, debt, or liquidity. The document is a regulatory disclosure of a material event rather than a financial performance report.
Material Changes and Incident Details
- Incident Type: Ransomware attack identified as "Brain Chiper".
- Target: Data Center 2 (Surabaya) within the Temporary National Data Center (PDNS) system.
- Timeline: Disruption reported on June 20, 2024; confirmed by MoCI press conference on June 24, 2024.
- Impact Scope: System failure and data encryption affecting 239 tenants as of June 26, 2024, including public services such as immigration (autogate and airport crossing), event permits, halal certification, and procurement policy services.
- Service Provider Role: Telkom Group (in partnership with Lintasarta, Sigma, and neutraDC) was appointed as the PDNS Service Provider for 2024.
Management Commentary and Response
Management activated a Crisis Center at Grha Merah Putih (GMP) Telkom Gatot Subroto on June 20, 2024, to coordinate recovery efforts with stakeholders including MoCI, the National Cyber and Crypto Agency, and the Indonesian National Police. The Crisis Center is managing service consolidation, step-by-step recovery, and strategy for normalizing services. As of the filing date, specific services including immigration, event permits, halal certification, and procurement policy services have been recovered.
Investor Verification Checklist
- Verify the total financial impact and potential liability costs associated with the ransomware attack and service disruption.
- Confirm the current status of the remaining 239 affected tenants and the timeline for full service restoration.
- Assess the potential for regulatory fines or penalties from the Indonesian Financial Services Authority (OJK) or MoCI.
- Review the long-term implications for Telkom Group's reputation and future government contracts.
- Check for any subsequent updates regarding the source of the "Brain Chiper" ransomware and data integrity.