What Happened
In March 2025, a threat actor claimed on X/Twitter (@DailyDarkWeb) and dark web sites to have breached the SIMAK (Sistem Informasi Manajemen Akademik) database of Universitas Siliwangi (Unsil) in Tasikmalaya, Indonesia, exfiltrating approximately 19,627 student records including names, national IDs, academic records, family information, emails, religion, and income details, with samples posted for sale under the seller “SaTaoz”. Unsil’s IT unit (UPA TIK) confirmed the incident on March 20, 2025, via an official statement (No. 098/UN58/LL/2025) signed by Rector Nandang Busaeri on March 21, noting the leaked data was non-active and no longer in use, though the breach source remained under investigation. In response, the university temporarily disabled access to simak.unsil.ac.id for security fixes and backups, planning reactivation by March 24, apologizing for disruptions to academic services. No further details on the exact breach method or additional impacts were disclosed.
