Bank Syariah Indonesia 2023 Data Breach
The 2023 Bank Syariah Indonesia data breach was a cybersecurity incident associated with service disruptions that began on May 8, 2023. BSI said it found indications of a cyberattack and disabled several channels to protect system security.
Exposed Data Types
1- Email addresses
About This Breach
What happened at Bank Syariah Indonesia?
As services were restored, BSI said protecting customer data and funds was its priority and carried out digital-forensic work with the relevant authorities. The LockBit group claimed responsibility and said it had taken data from the bank.
LockBit's attribution and volume statements are attacker claims. The catalog does not present them as a BSI-confirmed scope or affected-person total.
What data is included in LeakData search?
The reviewed archive contains a source-authored terminal field explicitly named email. Two independent full-dataset parsers produced the same 3,111,797 unique valid email addresses. LeakData imports only those email addresses; names, phone numbers, addresses, account details, documents, and financial information are not imported.
Eight emails in a small supplemental text member are an exact subset of the main CSV result and do not widen the search scope.
How many people were affected?
BSI has not published a confirmed unique affected-person total. LockBit's claims of about 15 million customers and employees and 1.5 TB of data are not a verified person count. The catalog total therefore remains unknown; archive rows and unique-email cardinality are not converted into affected people.
What should users do?
BSI customers should verify unexpected email, text messages, or calls through the official BSI application or bankbsi.co.id instead of following supplied links. Do not disclose passwords, PINs, card details, or one-time verification codes, and report unfamiliar account activity directly to the bank.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
