Analysis Of The Ministry Of Communication And Informatics Political Will Toward Personal Data Hacking By Bjorka In Cybersecurity Governance In Indonesia In 2022
DOI:
https://doi.org/10.33751/jhss.v10i2.231Keywords:
Political Will, Cybersecurity Governance, Personal Data, Bjorka, Governance NetworkAbstract
This study aims to analyze the extent to which the political will of the Ministry of Communication and Digital Affairs (Komdigi) affects the effectiveness of cybersecurity governance over personal data in Indonesia, using the 2022 Bjorka data hacking case as the case study. The method used is descriptive qualitative, with informants selected purposively from an internal representative of Komdigi and the civil society organization SAFENet, combined with secondary data from official documents and media reports, analyzed through governance network theory and Brinkerhoff's theory of political will. The results show that personal data security governance in Indonesia following the Bjorka case is marked by unresolved institutional fragmentation between Komdigi and the National Cyber and Crypto Agency (BSSN), and by a political will that remains symbolic rather than substantive, reflected in reactive policy initiatives, minimal civil society involvement in drafting implementing regulations, inconsistent budget allocation, the absence of credible sanctions due to the independent data protection authority not yet being established, and recurring major data breaches after Bjorka. The study also finds that leaked personal data has been used as an instrument of repression against critical citizens, indicating that the consequences of weak data governance extend beyond economic loss into the political sphere. It is concluded that strengthening Indonesia's cybersecurity governance requires substantive and sustained political will, rather than merely formal regulatory products on paper.
References
[1] Anantaka, H. G., Zulfa, E. A., & Nita, S. (2023). Bjorka: A cyber crime phenomenon which gets support from the community using analysis of criminological perspective. Budapest International Research and Critics Institute-Journal, 6(2), 1120–1129.
[2] Anggara, A., & Dinata, M. R. K. (2023). Hacker Bjorka: Pihak yang berperan dalam mencegah kebocoran data. Jurnal Hukum Magnum Opus, 6(1), 14–26.
[3] Bennett, C. J., & Raab, C. D. (2017). The governance of privacy: Policy instruments in global perspective. Routledge.
[4] Brinkerhoff, D. W. (2010). Unpacking the concept of political will to confront corruption. U4 Brief No. 1, Chr. Michelsen Institute.
[5] BSSN. (2017). Peraturan Badan Siber dan Sandi Negara Nomor 1 Tahun 2017 tentang Organisasi dan Tata Kerja Badan Siber dan Sandi Negara.
[6] Badan Siber dan Sandi Negara (BSSN). (2019a). Indonesia Cyber Security Monitoring Report 2019. Jakarta: Pusat Operasi Keamanan Siber Nasional (Pusopskamsinas), Badan Siber dan Sandi Negara.
[7] Badan Siber dan Sandi Negara (BSSN). (2019b). Roadmap pembinaan SDM keamanan siber dan sandi 2020-2024. Jakarta: Direktorat Pengendalian SDM, Deputi IV, Badan Siber dan Sandi Negara.
[8] Badan Siber dan Sandi Negara (BSSN). (2019c). Peta okupasi nasional keamanan siber. Jakarta: Badan Siber dan Sandi Negara.
[9] Cavelty, M. D. (2014). Breaking the cyber-security dilemma: Aligning security needs and removing vulnerabilities. Science and Engineering Ethics, 20, 701–715.
[10] CNBC Indonesia. (2025, March 17). Data sering bocor tak ada lembaga pengawas, begini nasib warga RI. https://www.cnbcindonesia.com/tech/20250317132512-37-619216/
[11] CNN Indonesia. (2022, September 24). Anggaran BSSN naik jadi Rp624 M, "berkah" Bjorka? https://www.cnnindonesia.com/teknologi/20220924041446-192-852010/
[12] Creswell, J. W. (2014). Research design: Qualitative, quantitative, and mixed methods approaches (4th ed.). Sage Publications.
[13] ELSAM. (2024, October 16). Lembaga pelindungan data pribadi, kunci penegakan kepatuhan UU PDP. https://www.elsam.or.id/siaran-pers/lembaga-pelindungan-data-pribadi--kunci-penegakan-kepatuhan-uu-pdp
[14] Fitrian, Y. (2023). Cyber terrorism: Analisis hukum pidana mengenai serangan Bjorka terhadap data negara. Arus Jurnal Sosial dan Humaniora, 3(3), 164–174.
[15] Hukumonline.com. (2026, May 8). Lembaga pelindungan data pribadi tak kunjung dibentuk, UU PDP digugat ke MK. https://www.hukumonline.com/berita/a/lembaga-pelindungan-data-pribadi-tak-kunjung-dibentuk--uu-pdp-digugat-ke-mk-lt69fd48eb0ba0d/
[16] Indah, F., & Sidabutar, A. Q. (2022). Peran cyber security terhadap keamanan data penduduk negara Indonesia (Studi kasus: Hacker Bjorka). Jurnal Bidang Penelitian Informatika, 1(1), 2.
[17] Klijn, E. H., & Koppenjan, J. (2012). Governance network theory: Past, present and future. Policy & Politics, 40(4), 587–606.
[18] Klijn, E. H., & Koppenjan, J. (2015). Governance networks in the public sector. Routledge.
[19] Kurniawan, D., & Syah, A. M. (2022). The impact of Bjorka hacker on the psychology of the Indonesian society and government in a psychological perspective. Conseils: Jurnal Bimbingan dan Konseling Islam, 2(2).
[20] LK2 FHUI. (2024). Pembobolan Pusat Data Nasional: Pembelajaran pemerintah dalam penguatan keamanan perlindungan data nasional. https://lk2fhui.law.ui.ac.id/
[21] Mahkamah Konstitusi RI. (2026, May 7). Kekosongan lembaga independen pelindungan data pribadi. https://www.mkri.id/berita/kekosongan-lembaga-independen-pelindungan-data-pribadi-25005
[22] Mahkamah Konstitusi RI. (2026, May 20). Urgensi sistem pelindungan data pribadi di Indonesia. https://www.mkri.id/berita/urgensi-sistem-pelindungan-data-pribadi-di-indonesia-25088
[23] Moleong, L. J. (2017). Metodologi penelitian kualitatif. PT Remaja Rosdakarya.
[24] Nissenbaum, H. (2011). Privacy in context: Technology, policy, and the integrity of social life. Journal of Information Policy, 1, 149–151.
[25] Pemerintah RI. (2022). Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi.
[26] Rizaldi, M. Z., Putra, R. D., & Ul Hosnah, A. (2023). Analisis kasus cybercrime dengan studi kasus hacker Bjorka terhadap pembocoran data. Justitia Jurnal Ilmu Hukum dan Humaniora, 6(2), 619.
[27] Rhodes, R. A. W. (1997). Understanding governance: Policy networks, governance, reflexivity and accountability. Open University Press.
[28] Solove, D. J. (2023). Data is what data does: Regulating based on harm and risk instead of sensitive data. Northwestern University Law Review, 118, 1081.
[29] Sørensen, E., & Torfing, J. (2017). Metagoverning collaborative innovation in governance networks. The American Review of Public Administration, 47(7), 826–839.
[30] Sutikno, T., & Stiawan, D. (2022). Cyberattacks and data breaches in Indonesia by Bjorka: Hacker or data collector? Bulletin of Electrical Engineering and Informatics, 11(6).
[31] Von Solms, R., & Van Niekerk, J. (2013). From information security to cyber security. Computers & Security, 38, 97–102.
[32] Wartakotalive.com. (2025, October 21). Setahun masa transisi UU PDP berakhir, Badan Pelindungan Data Pribadi belum juga terbentuk. https://wartakota.tribunnews.com/nasional/871626/
[33] Zed, M. (2004). Metode penelitian kepustakaan. Yayasan Obor Indonesia.
