Analysis: BSI at risk of lawsuit after its data breach by ha...

Bank Syariah Indonesia (BSI), a subsidiary of banking state-owned enterprise (SOE) Bank Mandiri, was a victim of extortion, by criminal hacker group LockBit, of data that allegedly belonged to the sharia banking SOE, including employee data, records of about 15 million of its customers and 1.5 terabytes (TB) of internal data. The data breach created by the hacker group after BSI did not cede to LockBit's demanded ransom over said data could make the bank liable for lawsuits. The alleged data breach first surfaced on May 11 when BSI CEO Hery Gunardi told a press briefing the bank had found indications of a cyberattack that caused disruptions to the sharia banking SOE's services from May 8, including its mobile banking, automated teller machines (ATMs) and branch offices. But all of BSI's services were recovered as of May 11, and he assured BSI clients their funds and data remained safe. ...