A glitch in Indonesia's electronic visa system has exposed sensitive passport details of Australian travelers to Bali, sparking fears of identity theft and data privacy breaches. The issue, which appears to have persisted for several months, allows travelers to view the personal information of others, including full names, dates of birth, passport numbers, and even photos when scanning a QR code on their visa documents.
At least three Australians have reported being affected by the glitch. Melbourne resident Lauren Levin was shocked when the private data of two other Australians appeared on her phone while scanning her e-visa. “I could see their full names, dates of birth, and passport numbers, and I assume they could see mine,” Levin told ABC. An immigration supervisor at Bali's Ngurah Rai Airport confirmed to her that this issue had been ongoing for a while, affecting all travelers, not just her.
Meanwhile, screenshots of an e-visa from Levin’s cousin, taken during a trip two months ago, displayed the details of an Indian traveler. Another traveler also reported seeing the passport details of two tourists from China, raising further concerns over how widespread this breach might be.
The data breach is the second significant e-visa system issue in recent months, following the installation of new smart e-gates at airports across Bali. The Indonesian Immigration Department has acknowledged the glitch, with a spokesperson stating, "We are aware of the problem, but we handle tens of thousands of visa-on-arrival applications every day. Anomalies like this have happened before, but we are committed to fixing them and improving the system."
Despite this assurance, many Australians are concerned about the potential for identity theft. Parramatta MP Andrew Charlton, Australia’s Special Envoy for Cyber Security and Digital Resilience, has urged Australians not to panic. "Your physical passport is still safe for travel and identity verification," Charlton reassured. "However, if you're concerned, you can cancel your passport and apply for a new one at any time."
Ongoing Data Security Concerns in Indonesia
Indonesia has faced multiple data breaches this year, exacerbating concerns over digital security in the country. In June 2024, a ransomware attack on Indonesia's Temporary National Data Centre impacted nearly 300 government institutions, including immigration services. Fingerprint data and taxpayer IDs have also been leaked and sold on the dark web in recent months.
Cybersecurity expert Alfons Tanujaya from Prasetiya Mulya University in Jakarta highlighted the recurring issue of data leaks. “Indonesia has experienced repeated data breaches, and despite expert recommendations, the solutions are not being implemented quickly enough. Immigration should pause the use of the faulty system and resolve the issue professionally,” he said.
Despite these issues, Bali remains one of the most popular destinations for Australians, with over a million Australians visiting the island annually. The Australian Department of Foreign Affairs and Trade (DFAT) maintains that Australian passports involved in the breach are still valid for travel, and there is no immediate change to travel advisories for Indonesia.
What Should Affected Travelers Do?
For Australians concerned about potential identity theft, authorities recommend contacting IDCARE, a free support service for identity and cybersecurity concerns, at 1800 595 160. Travelers can also contact the Australian Department of Foreign Affairs for further assistance.
This latest breach underscores the growing concern over Indonesia’s ability to secure sensitive traveler information as more tourists use the country’s electronic visa system. As the tourism industry in Bali continues to thrive, the demand for better data security measures has become increasingly urgent.
You can add one right now!