Inside the Dukcapil Database Leak: 1,598 Jakarta Records Exposed

HEROIC analysts identified a database leak tied to Dinas Kependudukan dan Pencatatan Sipil (Dukcapil) Provinsi DKI Jakarta, the population and civil registry office for Jakarta Province, with the data surfacing around June 7, 2025. The leak exposed 1,598 records containing email addresses, first and last names, gender, and birthdates. No passwords were included in this dataset. This report is currently unverified.

Inside the Dukcapil Database Leak

This is a database-style breach rather than a stolen password dump, which means the risk looks different. There is no login credential to change here. Instead, what leaked is the kind of personal identity data that government registries hold on record: who you are, your gender, and your date of birth, tied directly to your email address.

What Was Exposed in the Dukcapil Leak

• Email addresses
• First names
• Last names
• Gender
• Birthdates

Why This Matters Even Without a Password

A full name, birthdate, and email address are exactly the building blocks scammers use for identity theft and targeted phishing. Someone armed with your real name and birthdate can impersonate you convincingly on the phone or by email, pass basic identity checks, or craft a phishing message that feels personal enough to trust. This kind of data does not need a password to be dangerous.

How a Database Breach Like This One Happens

Unlike a stealer log pulled from an infected computer, a database breach usually comes from someone gaining unauthorized access to an organization's own systems, whether through a vulnerability, weak access controls, or an exposed export of records. The result is a structured dataset of the kind an agency like Dukcapil keeps for official population registration, now sitting outside its intended system.

Check If You Are Affected by This Leak

If you interact with Indonesian government population registration services, it is worth checking whether your information appears in this or any other exposed dataset. HEROIC's free breach scanner searches more than 400 billion leaked records so you can find out quickly and take steps to protect yourself from identity theft and phishing attempts.