What Happened
In the “Indonesian National Police Database” breach in 2026, a threat actor (linked to the alias Bjorka) allegedly accessed and exposed over 300,000 records from a POLRI personnel database, with reports and OSINT posts specifying around 341,000 individual records of Indonesian National Police staff. The incident, publicly highlighted around 9 April 2026, involved the dumping of a CSV-style dataset containing names, ranks, unit assignments, dates of birth, residential addresses, phone numbers, email addresses, and national identification numbers, i.e., extensive personally identifiable information (PII) on serving and former police personnel. The data was reportedly released for free on leak sites and social platforms as a retaliatory move after authorities claimed to have arrested “Bjorka,” and early analysis suggested at least part of the dataset derived from or reused older internal police records, though still highly sensitive from an operational-security standpoint.