Around 1 million people potentially affected by suspected breach in Indonesia’s COVID-19 app: report

An independent report has found that the Indonesian government’s COVID-19 test-and-trace mobile app, eHAC, suffered a data breach, potentially affecting records of 1.3 million users. Researchers discovered an unsecured database containing sensitive information, including personal data and COVID-19 test results. The app’s developer failed to implement adequate data privacy protocols, leaving the data vulnerable to fraud, phishing, and hacking. The Indonesian government is investigating the incident, which occurred in an earlier version of the app. Measures such as server security and proper access rules are advised to prevent future breaches.