Hellcome Bjorkanism
Bjorka emerged as a prominent data-extortion actor and hacktivist initially active in 2022, targeting Indonesian institutions with massive data leaks—including voter records, police data, and internal telecom and utility datasets. After going quiet in 2023, the actor resurfaced in early 2025, now positioning under the name Babuk2, leveraging legacy branding from the Babuk ransomware group to amplify perceived credibility and fuel data extortion operations. Notably, Bjorka has not been linked to deploying true ransomware payloads; rather, the strategy revolves around reputational leverage via data leaks and selecting branding for psychological impact.
6 MILION INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP)
In the sample you will find personal information about the president of Indonesia and his stupid and useless son, as well as officials in the Ministry of Finance and other ministers who are also useless.
FILE INFORMATION
Compressed : 500 MB
Uncompressed : 2 GB
Total Records : 6,663,379
Breach Date : SEP, 2024
Format : CSV
Compromised Data : NAME, NIK, NPWP NUMBER, ADDRESS, EMAIL, PHONE NUMBER, DOB, KPP NAME, KANWIL, STATUS PKP, JENIS WP ETC
Country : Indonesia
File Sharing : Private CDN
Price : $10K
217 MILLION SIAK DUKCAPIL MINISTRY OF HOME AFFAIRS OF INDONESIA
The SIAK database owned by Dukcapil Ministry of Home Affairs of Indonesia
FILE INFORMATION
Compressed : 16 GB
Uncompressed : 131 GB
Total Records : 217,750,843
Breach Date : Dec, 2023
Format : CSV
Compromised Data : NIK (ID CARD NO), Name, KK (Family Card No), Gender, DOB, Mother Maiden Name, Mother ID Card No, Father Name, Father ID CARD No, Address etc
Country : Indonesia
File Sharing : Private CDN
Price : $5K
34 MILLION INDONESIAN PASSPORTS
All Indonesian passports issued by Directorate General of Immigration of Indonesia.
FILE INFORMATION
Compressed : 1 GB
Uncompressed : 4 GB
Total Records : 34.900.867
Breach Date : Jul, 2023
Format : CSV
Compromised Data : Name, Passport Number, Passport Expiry Date, DOB, Gender, Issued Date
Country : Indonesia
File Sharing : Private CDN
Price : $10K
35 MILLION MYINDIHOME TELKOM INDONESIA
Previously I have shared the browsing history of Indihome users. Now I will share a personal information database of myindihome users. MyIndihome is an application created by Telkom Indonesia for Indihome users.
I also sell access to telkom indonesia’s internal database server. Where they store many of their service data and also their client’s own services. Will reveal more about #TelkomIndonesiaOperation soon.
FILE INFORMATION
Compressed : 7 GB
Uncompressed : 55 GB
Total Records : 35.900.002
Breach Date : Jun, 2023
Format : CSV
Compromised Data : IP, Email, Phone Number, Indihome Number, Name, NIK (ID CARD), Device Type, Address, Subscriptions Information etc
Country : Indonesia
File Sharing : Private CDN
Price : $5K
19 MILLION BPJS KETENAGAKERJAAN INDONESIA
BPJS Ketenagakerjaan is a government organization that provide worker welfare services. The Employment Social Security Administration or BPJS Ketenagakerjaan is a substitute for PT Jamsostek (Persero). Its job is to provide social security protection for Indonesian workers, both formal and informal workers.
FILE INFORMATION
Compressed : 1 GB
Uncompressed : 5 GB
Total Records : 19,564,922
Breach Date : March, 2023
Format : CSV
Compromised Data : Name, Email, NIK (ID CARD), Phone, Address, DOB, Gender, Job Type, Work Place etc
Country : Indonesia
File Sharing : Private CDN
Price : $5K
3,2 BILLION INDONESIAN COVID-19 APP PEDULI LINDUNGI
PeduliLindungi (roughly translated from Indonesian as “care to protect”) is the official COVID-19 contact tracing app used for digital contact tracing in Indonesia. This application is developed by the Indonesian Ministry of Communication and Information Technology (Kemenkominfo), in partnership with Committee for COVID-19 Response and National Economic Recovery (KPCPEN), Ministry of Health (Kemenkes), Ministry of State-Owned Enterprises (KemenBUMN), and Telkom Indonesia.[1] This app was formerly known as TraceTogether but later changed because Singapore had its app using the same name.
FILE INFORMATION
Compressed : 48 GB
Uncompressed : 157 GB
Total Records : 3,250,144,777
Breach Date : Nov, 2022
Format : CSV
Compromised Data : Name, Email, NIK (ID CARD), Phone, DOB, Device ID, Covid-19 Status, Checkin History, Contact Tracing History, Vaccination etc
Country : Indonesia
File Sharing : Private CDN
Price : $100K
45 MILLION MYPERTAMINA INDONESIA
MyPertamina is a digital financial service platform from Pertamina that integrated with the apps LinkAja. This application is used for non-cash fuel oil payments at Pertamina’s public fueling stations.
FILE INFORMATION
Compressed : 6 GB
Uncompressed : 30 GB
Total Records : 44,237,264
Breach Date : Nov, 2022
Format : CSV
Compromised Data : Name, Email, NIK, NPWP, Phone, Address, DOB, Gender, Income etc
Country : Indonesia
File Sharing : Private CDN
Price : $5K
105 MILLION KOMISI PEMILIHAN UMUM INDONESIA
General Elections Commission of Indonesia
FILE INFORMATION
Compressed : 4 GB
Uncompressed : 20 GB
Total Records : 105,003,428
Breach Date : Sept, 2022
Format : CSV
Compromised Data : NIK (National ID Card Number), KK (Family Card Number), Name, Address, Age, DOB, Gender etc
Country : Indonesia
File Sharing : Private CDN
Price : $5K
679K LETTERS TO THE PRESIDENT OF INDONESIA
Contains letter transactions from 2019-2021 as well ad documents sent to the President including a collection of letters sent by State Intelligence Agency (Badan Intelijen Negara) which labeled as secret.
FILE INFORMATION
Compressed : 40 MB
Uncompressed : 189 MB
Total Records : 679,180
Breach Date : Sept, 2022
Format : CSV
Compromised Data : tittle of letter, letter number, sender, receiver employee id, letter date etc
Country : Indonesia
File Sharing : Private CDN
Price : FREE
1,3 BILLION INDONESIAN SIMCARD REGISTRATION
Ministry of Communication and Information Technology of the Republic of Indonesia has issued a regulation which requires all prepaid SIM card users to register their phone number with a valid national identification card (KTP) and family card (KK). The registration period starts from October 31, 2017. Failure to do so by the end of the registration deadline would cause temporary suspension of services for the mobile phone number
FILE INFORMATION
Compressed : 18 GB
Uncompressed : 87 GB
Total Records : 1,304,401,300
Breach Date : August, 2022
Format : CSV
Compromised Data : NIK (National ID Card Number), Phone Number, Telco Providers, Registration Date
Country : Indonesia
File Sharing : Private CDN
Price : $25K
26M TELKOM INDONESIA INDIHOME CUSTOMER BROWSING HISTORY
Telkom Indonesia (Indihome) customer’s browsing history
FILE INFORMATION
Compressed : 5 GB
Uncompressed : 16 GB
Total Records : 26,730,798
Breach Date : August, 2022
Format : CSV
Compromised Data : NIK (ID CARD), IP, Email, Date, Keyword, Domain, Platform, Browser, URL, Google Keyword, Screen Resolution, Geo Location etc
Country : Indonesia
File Sharing : Private CDN
Price : $500
