Kebocoran Data Publik Dan Etika Ti Dalam Tata Kelola Serta Resiliensi Siber BPJS-PDN 2024

Audita Najwa Khalidah, Ragil Ragil, Raka Prabu Wikrama Yudianto, Dylan Saputra, Mugi Sugiharto Tramajie, Yunita Yunita

Abstract


Public Data Leakage and IT Ethics in Cyber Governance and Resilience BPJS-PDN 2024

Digital transformation in Indonesia’s public service sector faces significant challenges related to data security and IT professional ethics. This study compares cybersecurity governance and cyber resilience in two major public data breach incidents: BPJS Kesehatan (2021) and the National Data Center/PDN (2024), while examining the application of IT professional ethics. Using a qualitative comparative approach through literature review of official reports and scientific publications from the last five years, the findings show shared weaknesses in both incidents, including limited backup systems, weak vendor oversight, and low ethical awareness. BPJS Kesehatan demonstrates stronger governance and better coordination with the National Cyber and Crypto Agency (BSSN), whereas PDN shows weak mitigation efforts and limited public accountability. The study concludes that strengthening IT professional ethics, improving cybersecurity governance, and establishing an independent oversight body to ensure consistent implementation of the Personal Data Protection Law are essential for enhancing national cyber resilience.

Keywords


cybersecurity governance; data breach; IT professional ethics; BPJS Kesehatan; National Data Center

References


Aryanti, D. R. (2025). CYBERSECURITY GOVERNANCE IN PUBLIC INSTITUTIONS : MANAGING DIGITAL RISKS AND RESILIENCE. Visioner: Jurnal Pemerintahan Daerah Di Indonesia, 17(3), 24–35. https://doi.org/https://doi.org/10.54783/jv.v17i3.1424

Asiyanti, A. P. D., & Agussalim Agussalim. (2024). Strategi Manajemen Risiko dan Keamanan Siber dalam Ekonomi Digital: Tinjauan Literatur. JURNAL PENELITIAN SISTEM INFORMASI (JPSI), 2(4), 90–110. https://doi.org/10.54066/jpsi.v2i4.2562

Chotimah, H. C. (2019). Tata Kelola Keamanan Siber dan Diplomasi Siber Indonesia di Bawah Kelembagaan Badan Siber dan Sandi Negara [Cyber Security Governance and Indonesian Cyber Diplomacy by National Cyber and Encryption Agency]. Jurnal Politica Dinamika Masalah Politik Dalam Negeri Dan Hubungan Internasional, 10(2), 113–128. https://doi.org/10.22212/jp.v10i2.1447

Coda Sofiq Indonesiawan, R., Alroy, M., Laras Suci, T., & Rizky Prasetyo, B. (2021). Analisis Privasi Data Pengguna Dalam Instansi Bpjs Kesehatan Analysis of User Data Privacy in Bpjs Kesehatan Institution. Prosiding Seminar Nasional Teknologi Dan Sistem Informasi, 1(1), 174–182.

Fadli, M. R. (2021). Memahami desain metode penelitian kualitatif. HUMANIKA, 21(1), 33–54. https://doi.org/10.21831/hum.v21i1.38075

Firdaus, A., & Wardhani, D. F. (2025). MELINDUNGI PRIVASI DI ERA DIGITAL: KEAMANAN DATA PRIBADI DI INDONESIA. Inovasi Pembangunan: Jurnal Kelitbangan, 13(1).

Fransciko Pritama, Ekat Rueh Daya Leluni, Yovita, & Jadiaman Parhusip. (2024). Analisis Pelanggaran Etika Profesi Keamanan Siber (Studi Kasus Kebocoran Data Pajak di Indonesia). Teknik: Jurnal Ilmu Teknik Dan Informatika, 4(2), 53–56. https://doi.org/10.51903/teknik.v4i2.585

Ingrida, N. V., & Wibowo, D. (2024). Digital Security in Human Security: A Case Study of the Bjorka Hacking Incident. Politicos: Jurnal Politik Dan Pemerintahan, 4(1), 56–65. https://doi.org/10.22225/politicos.4.1.2024.56-65

Isik, O. (2025). Qualitative Research Approaches and Data Collection Methods: Understanding Meaning and Experience. Journal of Humanities and Education Development, 7(6), 19–32. https://doi.org/10.22161/jhed.7.6.3

Kayode-Bolarinwa, G. (2025). Cybersecurity Awareness and Risk Management in the Public Sector. International Journal of Intelligent Systems and Applications in Engineering, 13(1s), 146–152. https://ijisae.org/index.php/IJISAE/article/view/7609

Khudori, A., & Lala, A. (2024). Legal Implications of Data Breach Cases in Indonesia: Challenges and Solutions in the Era of Personal Data Protection. Indonesian Cyber Law Review, 1(1), 13–20. https://doi.org/10.59261/iclr.v1i1.1

Magnusson, L., Iqbal, S., Elm, P., & Dalipi, F. (2025). Information security governance in the public sector: investigations, approaches, measures, and trends. International Journal of Information Security, 24(4), 177. https://doi.org/10.1007/s10207-025-01097-x

Maharani, T. (2021). Dugaan Kebocoran Data 279 Juta WNI, BPJS Kesehatan Tempuh Langkah Hukum. Kompas. https://nasional.kompas.com/read/2021/05/25/11140881/dugaan-kebocoran-data-279-juta-wni-bpjs-kesehatan-tempuh-langkah-hukum

Marcal, A., Tommy, S., Irwan Padli Nasution, M., Manajemen, P., & Ekonomi dan Bisnis Islam, F. (2025). Evaluasi Manajemen Risiko Keamanan Siber pada Infrastruktur Digital Pemerintah: Studi Kasus Pusat Data Nasional (PDN). Jurnal Ilmiah Ekonomi Dan Manajemen, 3(6), 330–346. https://doi.org/10.61722/jiem.v3i6.5266

Maulida, O., & Utomo, H. (2023). Pertanggungjawaban Badan Penyelenggara Jaminan Sosial (BPJS) Kesehatan Atas Kebocoran Data Pribadi Pengguna dalam Perspektif Hukum Pidana. Indonesian Journal of Law and Justice, 1(2), 10. https://doi.org/10.47134/ijlj.v1i2.2011

Nugraha, D. A., Nurfitroh, R., Ul-Haq, N. D., Dika, R. P., & Lagontang, S. N. (2025). KEBOCORAN DATA BPJS KESEHATAN: ANCAMAN TERHADAP KEAMANAN INFORMASI PUBLIK DI ERA DIGITAL. Integrative Perspectives of Social and Science Journal, 2(03 Juli), 4685–4691.

Prio Pamungkas, R. wisn., Saputra, I. E., Alfaridzy, M. D., Pramedya, D. F., & Nugraha, D. A. (2024). MENINGKATKAN KEAMANAN DAN KEPATUHAN MELALUI TATA KELOLA IT DENGAN METODE SCRUM UNTUK MANAJEMEN RESIKO TI YANG LEBIH FLEKSIBEL. Kohesi: Jurnal Sains Dan Teknologi, 5(11), 167–186. https://doi.org/https://doi.org/10.3785/kohesi.v5i11.9065

Rahmika, A. R., Muhammad Akbar, Deni Luvi Jayanto, & Joshua Reska Bu’tu. (2025). Cloud Governance Frameworks: CIA-Based Security and Compliance. Journal of Embedded Systems, Security and Intelligent Systems, 379–389. https://doi.org/10.59562/jessi.v6i3.9541

Ridzqi Fauzi, T., Salamah, U., & Hendrawan, H. (2025). Tata Kelola Keamanan Digital Siber Pemerintah pada Diskominfo Kabupaten Garut. Jurnal Ilmu Multidisiplin, 4(1), 447–457. https://doi.org/10.38035/jim.v4i1.883

Setyowati, D. (2024). Fakta Pusat Data Nasional Down: Uang Tebusan, Ransomware, Lokasi, Efek. Katadata. https://katadata.co.id/digital/teknologi/667a509c1dbed/fakta-pusat-data-nasional-down-uang-tebusan-ransomware-lokasi-efek

Sinaga, R., & Taan, F. (2024). Penerapan ISO/IEC 27001:2022 dalam Tata Kelola Keamanan Sistem Informasi: Evaluasi Proses dan Kendala. NUANSA INFORMATIKA, 18(2), 46–54. https://doi.org/10.25134/ilkom.v18i2.205

Siti Maesaroh, R. (2025). Tantangan Keamanan Siber dan Implikasinya terhadap Hukum Kenegaraan: Tinjauan atas Peran Negara dalam Menjamin Ketahanan Digital. Staatsrecht: Jurnal Hukum Kenegaraan Dan Politik Islam, 4(2), 255–274. https://doi.org/10.14421/3n8bxw79

Suci Anugrah, Muhammad Zaky Himawan, Nabila Raihana Qalby, & Evy Nurmiati. (2025). Pengaruh Etika Profesi Terhadap Keamanan Informasi dalam Konteks Kebocoran Data BSI (Bank Syariah Indonesia): Studi Literatur Sistematis. Jurnal Tata Kelola Dan Kerangka Kerja Teknologi Informasi, 11(2), 106–112. https://doi.org/10.34010/jtk3ti.v11i2.17033

Syailendra Putra, M. R., Purwanti, P. A., & Istisofani, A. S. (2024). Analisis Keamanan Data Dalam Telematika Hukum: Antara Privasi dan Transparansi. Jurnal Akuntansi Hukum Dan Edukasi, 1(2), 633–642. https://doi.org/10.57235/jahe.v1i2.3875


Full Text: PDF

DOI: 10.33751/jmp.v14i1.13504

Refbacks

  • There are currently no refbacks.