Tries Digital Indonesia

We noticed a significant data leak surfacing on illicit forums on September 27, 2025, originating from Tries Digital Indonesia. What struck us immediately was the sheer volume of records exposed, exceeding one million, which points to a broad impact on the user base of this Indonesian digital services provider. The nature of the compromised data, encompassing personally identifiable information (PII) alongside authentication credentials, raises immediate concerns regarding identity theft and further downstream attacks. The breach appears to be a direct database compromise, suggesting a potential vulnerability in their data storage or access controls.

The breach breakdown reveals that 1,028,120 records were exfiltrated from Tries Digital Indonesia. The compromised data types include: Email Address, Username, First Name, Last Name, Gender, Phone Number, Birthday, and Password Hash. Notably, physical addresses and specific dates (likely registration or last activity dates) were also part of the exposed payload. The source structure of the leak indicates a direct dump from a database, rather than a series of targeted phishing campaigns or API exploits. The leak locations are primarily on dark web forums and marketplaces, where the data is being offered for sale or free distribution amongst malicious actors. The presence of bcrypt password hashes, while a stronger hashing algorithm than plain text storage, still presents a risk if weak passwords were used, as brute-force attacks remain feasible.

While specific news coverage directly linking this incident to Tries Digital Indonesia in mainstream media has been limited as of this analysis, the presence of the data on public-facing illicit forums suggests it is an active and accessible compromise. OSINT investigations into similar breaches involving Indonesian digital agencies in the past have often highlighted common vulnerabilities such as unpatched database systems, weak access credentials, and insufficient input validation on web applications. Further research into Tries Digital Indonesia's technical infrastructure and reported security practices, if available, would be beneficial in understanding the root cause and preventing recurrence.