Data Breach of General Elections Commission: Causes and Prevention Efforts

Abstract

The voter data breach of the General Elections Commission (KPU) on November 27, 2023, is a highly concerning event with potential negative impacts on society, including the misuse of voter data for political, criminal, or even terrorist purposes. This paper identifies the main factors causing the KPU data breach, including the complexity of the information system, software vulnerabilities, and user awareness issues. The complexity of the KPU voter data information system, which is integrated with various other systems, makes it vulnerable to cyber threats such as malware, phishing, and denial-of-service attacks. To mitigate this risk, regular security audits by independent information security experts are essential. Additionally, addressing software vulnerabilities requires timely software updates to fix identified security weaknesses. User awareness, particularly among KPU officials, is another critical factor. Enhancing user awareness through comprehensive training on information security principles, types of cyber attacks, and safe system usage practices is crucial. To prevent future data breaches, a holistic approach involving regular security audits, software updates, and strong user awareness programs is necessary to maintain the integrity of the election information system.