Ransomware Strikes National Data Center: The Importance of Disaster Recovery

Published on 2 July 2024

Disaster Recovery CDT

The Indonesian’s National Data Center (NDC) has been experiencing electronic system disruptions since Thursday, June 20, 2024, affecting various public services including immigration services such as immigration checks, AutoGate, Visa, residence permits, M-Passport, and Online Watchlist. 

This disruption has also impacted over 200 public services in central and regional agencies. The government, through the BSSN and the Ministry of Communication and Information, has confirmed that the disruption was caused by the Brain Cipher Ransomware, a type of LockBit 3.0. 

To address such cyberattacks, effective solutions like Disaster Recovery (DR) are necessary, especially to ensure that systems and data can be recovered, and service operations can return to normal quickly after a disruption. 

So, what is a DR solution, why is it important for businesses, and how does it help in data recovery during disasters like the one that occurred at TNDC? Here’s an overview. 

What Happened at the Temporary National Data Center (NDC)?

Indonesia’s National Data Center (NDC) is under public scrutiny due to a cyberattack that has paralyzed services for several days. Hackers managed to breach the TNDC servers and demanded a ransom of USD 8 million (approximately IDR 130 billion) from the Indonesian government. 

The BSSN explained the chronology of this breach. Based on preliminary forensic analysis, the attack began on June 17, 2024, at 11:15 PM WIB, trying to disable the Windows Defender security feature. This allowed malicious activities to go undetected. 

Due to the attack, the National Data Center (NDC) servers were disrupted, affecting over 200 central and regional agencies. This includes data from the Indonesia Smart Card (KIP), disrupting the ongoing data verification process for prospective students. 

What is Disaster Recovery and Why Is It Important in Addressing Issues Like at NDC?

What is Disaster Recovery and Why Is It Important in Addressing Issues Like at NDC?

Cyberattacks, particularly the ransomware attack that crippled the TNDC system and public services for nearly a week, highlight the critical importance of implementing Disaster Recovery (DR) solutions in every company. 

Why is this important? Because DR solutions comprise a set of procedures and steps designed to restore electronic systems and data after disruptions or disasters, whether caused by cyberattacks, natural disasters, or system failures. 

These solutions have proven effective in minimizing downtime, reducing losses, and ensuring that electronic system operators can resume operations quickly and efficiently after a disruption. Moreover, effective DR implementation helps electronic system operators comply with regulations related to the security of electronic systems and operational continuity. 

How Does Disaster Recovery Work?

Here are the general steps and processes involved in Disaster Recovery: 

1. Planning

The first step in DR is to create a recovery plan. This involves identifying potential risks, assessing their impact on business operations, and determining recovery priorities for critical systems, applications, and data. 

2. Developing Recovery Strategies

Once risks are identified, the next step is to develop appropriate recovery strategies. This includes selecting the right technologies, infrastructure, and recovery processes to meet the company’s needs in addressing various types of disasters. 

3. Testing

Testing DR is crucial to ensure that the recovery plan works as expected when needed. This involves simulating disaster or emergency scenarios that allow the company to test the effectiveness of the recovery plan and identify areas for improvement. 

4. Implementation

After the recovery plan is tested and refined, the next step is to implement it in a production environment. This involves adjusting technology infrastructure and operational processes to align with the established recovery strategies. 

5. Monitoring and Maintenance

Disaster Recovery is not a one-time process but a continuous initiative. Companies need to constantly monitor and maintain their recovery plans and update them regularly in line with changes in the business and technological environment. 

Tips for Choosing a Disaster Recovery Solution for Quick and Efficient Data Recovery

Tips for Choosing a Disaster Recovery Solution for Quick and Efficient Data Recovery

To ensure that your DR system has the best capabilities for data recovery, consider the following: 

1. Automated Implementation, Operations, and Reporting

Implementation, operation, and reporting processes should be automated to save time and effort in managing data recovery. 

2. Fast and Flexible Replication

Fast and flexible replication capabilities allow data to be recovered quickly in a disaster scenario. 

3. Cost-Optimized Data Mobility to the Cloud

Moving data to the cloud should be cost-efficient and easy to accomplish. 

4. Ransomware Detection and Prevention

The ability to detect and prevent ransomware attacks is crucial to protecting data from security threats. 

5. Enterprise Scalability

The data recovery solution should be able to scale with business growth. 

As mentioned earlier, using Disaster Recovery can minimize the threat of data loss. This solution enables companies to recover data and systems if infrastructure failures occur due to disasters or cyberattacks. 

The Best Disaster Recovery Solution from Hitachi Data Protection Suite

To meet increasingly complex security standards and requirements, Hitachi Vantara has developed an integrated data protection solution called Hitachi Data Protection Suite. This solution encompasses multiple layers of defense, from advanced threat identification and detection to immutable storage to protect against cyberattacks, and built-in capabilities to quickly and easily respond to and recover data. 

By combining the superior data protection capabilities of HDPS, supported by Commvault, with highly scalable and industry-leading object storage from HCP for Cloud Scale, your company can confidently face current and future challenges. 

This solution provides comprehensive threat monitoring, including active monitoring for anomaly detection, backup monitoring to observe anomaly change rates, and rapid event monitoring and response to attacks. 

The response includes steps such as removing threats from backups, continuously validating backup data to ensure its authenticity, and integrating with existing SIEM and SOAR platforms to manage and coordinate actions efficiently. 

With these features, the Hitachi Data Protection Suite not only provides comprehensive protection against ransomware attacks and other disasters but also ensures that companies can quickly and efficiently recover critical data, allowing them to resume operations as soon as possible after an emergency. 

How Can Hitachi Data Protection Suite Help Companies Implement Effective Disaster Recovery?

Hitachi Data Protection Suite (HDPS) is specifically designed to support the Disaster Recovery (DR) process effectively and efficiently. Here are some ways HDPS helps in Disaster Recovery: 

Threat Monitoring

Equipped with active monitoring capabilities that can detect anomalies and suspicious changes in the IT environment. This helps quickly identify potential ransomware attacks or other disasters. 

Rapid Data Recovery

Offers fast and flexible data recovery capabilities. With automated recovery features supported by scalable storage components, companies can quickly recover their data after a disruption. 

Granular File and Server Recovery

Allows granular recovery of files and servers, enabling companies to restore only the data or applications affected by the disaster without having to restore the entire system. 

High Availability and Direct Replication

Provides high availability and direct replication options to ensure high data and application availability. This helps meet strict Recovery Time Objective (RTO) requirements. 

Backup Data Validation

Continuously validates backup data to ensure its authenticity and integrity. This helps ensure that the recovered data is trustworthy and not corrupted. 

Orchestration with API

Can be integrated with Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms via REST APIs. This allows companies to efficiently manage and coordinate recovery actions. 

Get Hitachi Data Protection Suite from CDT

Take advantage of the Hitachi Data Protection Suite solution to effectively protect your data from loss and ensure quick data recovery during disasters, ensuring smooth business operations. 

As an authorized partner of Hitachi Vantara, CDT will help you avoid trial and error from the consultation, deployment, maintenance, to after-sales support stages. Supported by experienced and certified IT professionals, CDT will assist you through all processes of adopting the Hitachi Vantara solution to ensure all your business data is protected. Interested in the Hitachi Data Protection Suite solution? Contact our team by clicking the following link. 

Author: Ary Adianto 

Content Writer CTI Group 

 

Tags

Don’t miss out!

Sign up for our newsletter and stay up to date.

Privacy & Policy

PT Central Data Technology (“CDT” atau “kami”) sangat berkomitmen untuk memastikan bahwa privasi Anda dilindungi dengan sebaik-baiknya sebagai hal yang sangat penting bagi kami. Melalui https://blog.centraldatatech.com/, kami akan mengatur penggunaan Anda terhadap situs web ini, termasuk semua halaman dalam situs web ini (secara kolektif disebut di bawah ini sebagai “Situs Web ini”), kami ingin berkontribusi dalam menyediakan lingkungan yang aman dan terjamin bagi pengunjung.

Berikut adalah ketentuan kebijakan privasi (“Kebijakan Privasi”) antara Anda (“Anda” atau “Anda”) dan CDT. Dengan mengakses situs web ini, Anda mengakui bahwa Anda telah membaca, memahami, dan menyetujui untuk terikat oleh Kebijakan Privasi ini.

Penggunaan Layanan Langganan oleh CDT dan Pelanggan Kami

Ketika Anda meminta informasi dari CDT dan memberikan informasi yang secara pribadi mengidentifikasi Anda atau memungkinkan kami untuk menghubungi Anda, Anda setuju untuk mengungkapkan informasi tersebut kepada kami. CDT dapat mengungkap informasi tersebut hanya untuk keperluan pemasaran, promosi, dan aktivitas sebatas untuk CDT dan Situs Web ini.

Pengumpulan Informasi

Anda bebas menjelajahi Situs Web ini tanpa memberikan informasi pribadi tentang diri Anda. Ketika Anda mengunjungi Situs Web atau mendaftar untuk layanan langganan, kami menyediakan beberapa informasi navigasional untuk Anda mengisi informasi pribadi Anda agar dapat mengakses beberapa konten yang kami tawarkan.

CDT dapat mengumpulkan data pribadi Anda seperti nama Anda, alamat email, nama perusahaan, nomor telepon, dan informasi lainnya tentang Anda atau bisnis Anda. Kami mengumpulkan data Anda dengan berbagai cara, secara online dan offline. CDT mengumpulkan data Anda secara online menggunakan fitur media sosial, pemasaran melalui email, situs web, dan teknologi cookies. Kami mungkin mengumpulkan data Anda secara offline dalam acara-acara seperti konferensi, pertemuan, lokakarya, dll. Namun, kami tidak akan menggunakan atau mengungkapkan informasi tersebut kepada pihak ketiga atau mengirimkan email yang tidak diminta ke salah satu alamat yang kami kumpulkan, tanpa izin Anda. Kami memastikan bahwa identitas pribadi Anda hanya akan digunakan sesuai dengan Kebijakan Privasi ini.

Bagaimana CDT Menggunakan Informasi yang Dikumpulkan

CDT hanya menggunakan informasi yang dikumpulkan sesuai dengan kebijakan privasi ini. Pelanggan yang berlangganan layanan langganan kami diwajibkan melalui perjanjian dengan mereka untuk mematuhi Kebijakan Privasi ini.

Selain penggunaan informasi Anda, kami dapat menggunakan informasi pribadi Anda untuk:

  • Meningkatkan pengalaman penjelajahan Anda dengan mempersonalisasi situs web dan meningkatkan layanan langganan.
  • Mengirim informasi tentang CDT.
  • Mempromosikan layanan kami kepada Anda dan berbagi konten promosi dan informatif dengan Anda sesuai dengan preferensi komunikasi Anda.
  • Mengirim informasi kepada Anda mengenai perubahan dalam syarat layanan pelanggan kami, Kebijakan Privasi (termasuk kebijakan cookie), atau perjanjian hukum lainnya.

Teknologi Cookies

Cookies adalah potongan kecil data yang situs web transfer ke hard drive komputer pengguna ketika pengguna mengunjungi situs web. Cookies dapat mencatat preferensi Anda saat mengunjungi situs tertentu dan memberikan keuntungan dalam mengidentifikasi minat pengunjung kami untuk analisis statistik situs kami. Informasi ini dapat memungkinkan kami untuk meningkatkan konten, memodifikasi, dan membuat situs kami lebih ramah pengguna.

Cookies digunakan untuk beberapa alasan, seperti alasan teknis agar situs web kami dapat beroperasi. Cookies juga memungkinkan kami untuk melacak dan mengarahkan minat pengguna kami untuk meningkatkan pengalaman situs web dan layanan langganan kami. Data ini digunakan untuk memberikan konten dan promosi yang disesuaikan dengan pelanggan yang memiliki minat pada subjek tertentu.

Anda memiliki hak untuk memutuskan apakah menerima atau menolak cookies. Anda dapat mengedit preferensi cookies Anda melalui pengaturan browser. Jika Anda memilih untuk menolak cookies, Anda masih dapat menggunakan situs web kami, meskipun akses Anda ke beberapa fungsi dan area situs web kami mungkin terbatas.

Situs Web ini juga dapat menampilkan iklan dari pihak ketiga yang berisi tautan ke situs web lain yang menarik. Setelah Anda menggunakan tautan ini untuk meninggalkan situs kami, harap dicatat bahwa kami tidak memiliki kendali atas situs tersebut. CDT tidak dapat bertanggung jawab atas perlindungan dan privasi informasi yang Anda berikan saat mengunjungi situs web tersebut, dan Kebijakan Privasi ini tidak mengatur situs web tersebut.

Kontrol Data Pribadi Anda

CDT memberikan kendali kepada Anda untuk mengelola data pribadi Anda. Anda dapat meminta akses, koreksi, pembaruan, atau penghapusan informasi pribadi Anda. Anda dapat berhenti berlangganan dari aktivitas pemasaran kami dengan mengklik “berhenti berlangganan” di bagian bawah email kami atau menghubungi kami langsung untuk menghapus Anda dari daftar langganan kami.

Kami akan menjaga informasi pribadi Anda agar tetap akurat, dan kami memungkinkan Anda untuk memperbaiki atau mengubah informasi identifikasi pribadi Anda melalui marketing@centraldatatech.com

Jangan lewatkan!

Daftar untuk newsletter kami dan tetap terkini.

Privacy & Policy

PT Central Data Technology (“CDT” or “us”) is strongly committed to ensuring that your privacy is protected as utmost importance to us. https://www.centraldatatech.com/ , we shall govern your use of this website, including all pages within this website (collectively referred to herein below as this “Website”), we want to contribute to providing a safe and secure environment for visitors.

The following are terms of privacy policy (“Privacy Policy”) between you (“you” or “your”) and CDT. By accessing the website, you acknowledge that you have read, understood and agree to be bound by this Privacy Policy

Use of The Subscription Service by CDT and Our Customers

When you request information from CDT and supply information that personally identifies you or allows us to contact you, you agree to disclose that information with us. CDT may disclose such information for marketing, promotional and activity only for the purpose of CDT and the Website.

Collecting Information

You are free to explore the Website without providing any personal information about yourself. When you visit the Website or register for the subscription service, we provide some navigational information for you to fill out your personal information to access some content we offered.

CDT may collect your personal data such as your name, email address, company name, phone number and other information about yourself or your business. We are collecting your data in some ways, online and offline. CDT collects your data online using features of social media, email marketing, website, and cookies technology. We may collect your data offline in events like conference, gathering, workshop, etc. However, we will not use or disclose those informations with third party or send unsolicited email to any of the addresses we collect, without your express permission. We ensure that your personal identities will only be used in accordance with this Privacy Policy.

How CDT Use the Collected Information

CDT use the information that is collected only in compliance with this privacy policy. Customers who subscribe to our subscription services are obligated through our agreements with them to comply with this Privacy Policy.

In addition to the uses of your information, we may use your personal information to:

  • Improve your browsing experience by personalizing the websites and to improve the subscription services.
  • Send information about CDT.
  • Promote our services to you and share promotional and informational content with you in accordance with your communication preferences.
  • Send information to you regarding changes to our customers’ terms of service, Privacy Policy (including the cookie policy), or other legal agreements

Cookies Technology

Cookies are small pieces of data that the site transfers to the user’s computer hard drive when the user visits the website. Cookies can record your preferences when visiting a particular site and give the advantage of identifying the interest of our visitor for statistical analysis of our site. This information can enable us to improve the content, modifying and making our site more user friendly.

Cookies were used for some reasons such as technical reasons for our website to operate. Cookies also enable us to track and target the interest of our users to enhance the experience of our website and subscription service. This data is used to deliver customized content and promotions within the Helios to customers who have an interest on particular subjects.

You have the right to decide whether to accept or refuse cookies. You can edit your cookies preferences on browser setup. If you choose to refuse the cookies, you may still use our website though your access to some functionality and areas of our website may be restricted.

This Website may also display advertisements from third parties containing links to other websites of interest. Once you have used these links to leave our site, please note that we do not have any control over the website. CDT cannot be responsible for the protection and privacy of any information that you provide while visiting such websites and this Privacy Policy does not govern such websites.

Control Your Personal Data

CDT give control to you to manage your personal data. You can request access, correction, updates or deletion of your personal information. You may unsubscribe from our marketing activity by clicking unsubscribe us from the bottom of our email or contacting us directly to remove you from our subscription list.

We will keep your personal information accurate, and we allow you to correct or change your personal identifiable information through marketing@centraldatatech.com