Jakarta, INTI - Global cybersecurity firm FortiGuard Labs has recorded at least 1.6 million cyberattack attempts targeting Indonesia over the past 24 hours, equivalent to an average of 18 attacks per second. Katadata accessed the FortiGuard Labs dashboard on Monday, November 9, 2026, at 7:00 a.m. Western Indonesian Time (WIB).
Over the past seven days, Indonesia recorded more than 7 million cyberattack attempts, while the monthly total exceeded 30 million.
Compared with other Southeast Asian countries, Indonesia ranked second in the number of detected cyberattack activities, behind Malaysia. Malaysia recorded approximately 70 million attacks over the past month, including 2.4 million within the latest 24-hour period, averaging 28 attacks per second.
It is important to note that these figures represent detected and blocked attack attempts, rather than confirmed cases of successful system breaches.
Indonesia's banking, financial services, and insurance industries were the most frequently targeted sectors, recording approximately 711,000 attack attempts over the past 24 hours.
The technology sector followed with around 387,000 attacks, while government institutions recorded approximately 122,000. Manufacturing and education each experienced around 49,000 detected attack attempts.
Telecommunications operators in Indonesia also recorded approximately 18,000 attacks. The transportation and logistics sectors, along with construction, each registered around 13,000, while agriculture recorded approximately 12,000.
Global Cyberattacks Surge, Raising Security Concerns for Indonesia
Indonesian cybersecurity experts have previously warned that the country must strengthen its preparedness amid the growing frequency of cyberattacks worldwide.
FortiGuard Labs recorded at least 200 million cyberattack attempts globally over the past 24 hours.
Several major cyber incidents have also been reported across different countries in recent weeks. These include attacks targeting cooling system controllers and supermarket freezers in several European countries, resulting in food spoilage and raising concerns over potential disruptions to blood bank operations.
South Korea has also experienced breaches involving several financial institutions, including major banks, resulting in the exposure of approximately 437,000 customer records.
Meanwhile, several airlines across Asia have reported data breaches following a cyber incident involving Amadeus, a Spain-based travel booking platform.
Airlines that have confirmed data exposure include Singapore Airlines, Malaysia Airlines, Japan Airlines, Cathay Pacific Airways, All Nippon Airways, and Asiana Airlines. At least hundreds of thousands of booking records were reportedly exposed in the incident involving Amadeus.
Pratama Persadha, Chairman of the Communication and Information System Security Research Center (CISSReC), said the series of cyber incidents should serve as a warning for Indonesia to strengthen its national cybersecurity preparedness.
He emphasized that cyberattacks have evolved into significant risks to strategic infrastructure, economic stability, and public security.
"Threats are no longer limited to government data centers. They also target telecommunications infrastructure, banking, energy, transportation, healthcare, and digital supply chains. Dependence on technology vendors, third-party software, and internet-connected systems must also be treated as a serious concern," Pratama told Katadata.co.id on Friday (November 6).
Cybersecurity observer Alfons Tanujaya also highlighted the rapid pace of industrial digitalization and third-party vendor integration in Indonesia.
However, he pointed out that the protection of Operational Technology (OT) and Industrial Control Systems (ICS), which manage critical operations such as electricity, water supply, logistics cooling systems, and transportation, is frequently overlooked. These systems are also often insufficiently segregated from conventional internet networks.
To address these vulnerabilities, Alfons said the government should immediately conduct a comprehensive inventory and rigorous security audits of industrial control panels across public infrastructure in Indonesia.
He also called for mandatory third-party supply chain security standards for Electronic System Operators (PSE), particularly those operating in the public and strategic sectors.
Furthermore, the government should strengthen incident reporting governance and enforce compliance with existing cybersecurity standards and regulations before major security incidents occur.
Conclusion
The growing number of detected cyberattack attempts targeting Indonesia highlights the urgent need to strengthen national cybersecurity resilience. With the financial, technology, and government sectors among the most frequently targeted, protecting critical infrastructure and securing third-party supply chains must become key priorities. As digitalization accelerates, stronger security standards, proactive monitoring, and effective incident response will be essential to safeguarding Indonesia's digital ecosystem and economic stability.
Read more: Experts Urge Public to Stay Calm Amid Hundreds of Thousands of Cyberattacks Targeting Indonesia