20240626_TLKM_Laporan Informasi dan Fakta Material_31675736_lamp1.pdf

Number :        Tel.66/UM 000/DCI-M0200000/2024

Jakarta, June 26, 2024

To
Board of Commissioners of the Indonesian Financial Services Authority
Attn. Chief Executive of Capital Market Supervision, Derivative Finance and Carbon Exchanges
Sumitro Djojohadikusumo Building
Jl. Lapangan Banteng Timur No.2-4
Jakarta 10710

Re          :   Cyber Attack (Ransomware Brain Chiper) to the System of Cloud Computing
                Service of National Data Center of Ministry of Communication and Informatics


Dear Sir/Madam,

In compliance with Indonesian Financial Service Authority’s (Otoritas Jasa Keuangan/”OJK”)
Regulation No. 31/POJK.04/2015 concering Disclosure of The Information or Material Facts by The
Issuer or Public Company, we hereby inform you that:

     Issuer Name                : PT Telkom Indonesia (Persero) Tbk
     Business Sector            : Telecommunication
     Telephone                  : (+6221) 5215109
     E-Mail                     : investor@telkom.co.id

                                 Cyber Attack (Ransomware Brain Chiper) to the System of Cloud
     Information or Material
1.                               Computing Service of National Data Center of Ministry of
     Facts
                                 Communication and Informatics (MoCI).

2.   Date                        June 24, 2024

3.   Description                 a. Temporary National Data Center (PDNS) is part of government
                                    strategic program to implement Electronic Based Government
                                    System Architecture (SPBE) which is under MoCI. Telkomgroup
                                    was part of the partnership of Telkom-Lintasarta-Sigma-
                                    neutraDC which was appointed by MoCI to become PDNS
                                    Service Provider for 2024 based on the tender result of the
                                    project.
                                 b. PDNS Service has some type of services which consist of:
                                    Infrastructure as a Service (IaaS), Software as a Service
                                    (SaaS), Security as a Service (Secaas), Backup as a Service
                                    (Baas), and Intra Government Network (JIP) with all the
                                    services mentioned being a request as a service type of
                                    services (based on the tenant request).
                                 c. On June 24, 2024, has been confirmed by the Press
                                    Conference conducted by MoCI that there has been disruption
                                    on the PDNS Service and has been reported to affect the
                                    autogate and airport crossing system by Directorate General of
                                    Immigration on June 20, 2024 at 04.15 (Western Indonesia
                                    Time).
                                 d. After thorough analysis, coordinated effort, and escalating such
                                    disruption to the principal cloud platform on PDNS, it was found
                                    and confirmed that there has been an ransomware Brain Chiper
                                    attack to the Data Center 2 (Surabaya). This ransomware attack