Alleged Data Breach of Bank Syariah Indonesia Customers: An Analysis of Personal Data Protection and Legal Liability Under the Personal Data Protection Act
Dugaan Kebocoran Data Nasabah Bank Syariah Indonesia: Analisis Pelindungan Data Pribadi Dan Pertanggungjawaban Hukum Berdasarkan Undang-Undang Perlindungan Data Pribadi
DOI:
https://doi.org/10.21111/jicl.v9i2.114Keywords:
personal data protection, Bank Syariah Indonesia, legal responsibility, Islamic banking customersAbstract
The alleged leakage of customers' personal data at Bank Syariah Indonesia (BSI) resulting from the LockBit 3.0 ransomware attack in 2023 has raised serious concerns regarding the protection of personal data in the digital banking sector. This incident demonstrates that digital transformation in banking services not only enhances service efficiency but also increases the risk of personal data security breaches. This study aims to analyze the legal protection of customers' personal data at Bank Syariah Indonesia based on Law Number 27 of 2022 concerning Personal Data Protection and to examine BSI's legal liability for the alleged personal data breach. This research employs a normative legal research method using statutory and conceptual approaches. Legal materials were collected through library research, including legislation, legal textbooks, scholarly journal articles, and other relevant legal documents. The findings indicate that the protection of customers' personal data in the banking sector is regulated under the Personal Data Protection Law, the Banking Law, the Islamic Banking Law, and regulations governing the financial services sector. The alleged data breach at BSI indicates a potential failure to fulfill the obligations of a data controller in safeguarding personal data and providing notification to data subjects. BSI's accountability measures were primarily implemented through the restoration of banking services and the strengthening of cybersecurity systems. However, transparency in notifying affected customers has not yet been fully optimized.
References
Antonio, Muhammad Syafi’i. Bank Syariah: Dari Teori ke Praktik. Jakarta: Gema Insani, 2001.
Hans, Kelsen. Pure Theory of Law (Teori Hukum Murni). Diterjemahkan oleh Raisul Muttaqien. Bandung: Nusa Media, 2006.
Rahardjo, Satjipto. Ilmu Hukum. Bandung: PT Citra Aditya Bakti, 2000.
Santoso, Wimboh. Roadmap Pengembangan Perbankan Syariah Indonesia. Jakarta, 2025.
Jurnal Ilmiah
Agustina, Petronela Charlota Suitela, Tarida Paulina Siahaan. “Perlindungan Hukum Terhadap Hilangnya Dana Nasabah Bank BRI Yang Melanggar PrinsipKehati-Hatian Bank.” SYARIAH: Jurnal Ilmu Hukum 2, no. 1 (2024): 171–79. https://doi.org/https://doi.org/10.62017/syariah.v2i1.2626.
Ajie Agung Laksana, Heru Sugiyono. “Reconstructing Civil Liability for Banking Data Breaches: A Comparative Study of Indonesia, France, and Germany.” Al-Risalah Jurnal Ilmu Syariah Dan Hukum 26, no. 1 (2026): 1097–1117. https://doi.org/https://doi.org/10.24252/al-risalah.vi.66749.
Alieffa Nanda Ervian, Hamzah, Sepriyadi Adhan S. “Perlindungan Hukum Terhadap Nasabah Atas Kebocoran Data Pribadi Dalam Layanan Perbankan Digital Di Indonesia.” Al-Zayn : Jurnal Ilmu Sosial & Hukum 3, no. 6 (2025): 8785–93. https://doi.org/https://doi.org/10.61104/alz.v3i6.2783.
Amandha Bayu Wiedyasari, Wardah Yuspin. “Protection Of Customer Personal Data Of Bank Syariah Indonesia Reviewed From Pojk Number 6/Pojk.07/2022.” Unram Law Review 8, no. 1 (2022): 1–17. https://doi.org/https://doi.org/10.29303/ulrev.v8i1.331.
Angelina Septiani Zaroh, Sri Budi Purwaningsih. “Personal Data Protection in Banking Cybersecurity Breach Cases.” Indonesian Journal of Law and Economics Review 21, no. 1 (2026): 1–13. https://doi.org/https://doi.org/10.21070/ijler.v21i1.1533.
Artama Aura1, Enni Soerjati Priowirjanto2, Chloryne Tri Isana Dewi. “Privacy Protection Guarantee for Data Hacking Victims According to Indonesian Law.” Padjadjaran Journal of International Law 9, no. 1 (2025): 1–15. https://doi.org/https://doi.org/10.23920/pjil.v8i2.1823.
Dian Ismiati Anggraini, Panca Oktavia Hadi Putra. “Data Protection Impact Assessment Framework in the Banking Sector in Indonesia to Implement Law of Personal Data Protection.” Journal Sistem Informasi (Journal of Information System) 21, no. 1 (2025): 15–34. https://doi.org/https://doi.org/10.21609/jsi.v21i1.1439.
Diana Setiawati, Tyas Permata Dewi. “Personal Data Protection Vulnerabilities In Cybercrime Sniffing Bank Account Break-Ins.” Yurispruden: Jurnal Fakultas Hukum Universitas Islam Malang 7, no. 193 (2024): 184–99. https://doi.org/10.33474/yur.v7i2.21184.
Eddy, Rina Biyan Ramadani. “Rekonstruksi Perlindungan Konsumen Dalam Transaksi Perbankan Syariah Di Era Digitalisasi Finansial.” Sipakainge: Inovasi Penelitian, Karya Ilmiah, Dan Pengembangan (Islamic Science) 3, no. 3 (2025): 58–93. https://doi.org/https://doi.org/10.35905/sipakainge.v3i3.14097.
Enny Martha Sasea, Marius Suprianto Sakmaf. “Digital Bank Legal Challenges: Security Protection and Leakage of Customer Personal Data.” Awang Long Law Review 6, no. 1 (2023): 245–50. https://doi.org/https://doi.org/10.56301/awl.v6i1.989.
Ferdiansyah, Zainuddin, Andi Risma. “Bukan Perlindungan Hukum Kerahasiaan Data Pribadi Nasabah Pada Perbankan Di Indonesia.” JournalofLex Philosophy(JLP) 6, no. 1 (2025): 84–94. https://doi.org/https://doi.org/10.52103/jlp.v6i1.
Ferdiansyah Ferdiansyah, Zainuddin Zainuddin, Andi Risma. “Perlindungan Hukum Kerahasiaan Data Pribadi Nasabah Pada Perbankan Di Indonesia.” Journal of Lex Philosophy (JLP) 6, no. 1 (2025): 84–94. https://doi.org/https://doi.org/10.52103/jlp.v6i1.
Fitrianto, Bambang, Armilati Suryani, Putri Gaja, Aldi Fadillah Dalimunthe, Anggreyny Vini R Br, Aina Sari Harahap, Universitas Pembangunan, and Panca Budi. “Kerangka Regulasi Open Banking Dan Perlindungan Data Pribadi Nasabah.” Indonesian Journal of Islamic Jurisprudence,Economic and Legal Theory 4, no. 1 (2026): 536–50. https://doi.org/https://doi.org/10.62976/ijijel.v4i1.1645.
Guna Gerhat Sinaga, Azareel Sulistiyanto Jusuf, Yusuf Kornelius, Dwi Desi Yayi Tarina. “Analisis Peran Otoritas Jasa Keuangan Terhadap Perbankan Sebagai Upaya Perlindungan Data Pribadi Nasabah Bank (Studi Kasus Kebocoran Data Nasabah Bank Syariah Indonesia).” Jurnal Pendidikan Tambusai 7, no. 3 (2023): 28374–83. https://doi.org/https://doi.org/10.31004/jptam.v7i3.11404.
Haliwela, Nancy Silvana. “The Essence of Legal Protection of Personal Data of Customers In Banking Transactions.” SASI 29, no. 3 (2023): 548–56. https://doi.org/https://doi.org/10.47268/sasi.v29i3.1528.
Harahap, Amhar Maulana. “Analisis Risiko Dalam Digitalisasi Perbankan Syariah: Tantangan Dan Solusi.” Jurnal Masharif Al-Syariah: Jurnal Ekonomi Dan Perbankan Syariah 10, no. 204 (2025): 686–705. https://doi.org/https://doi.org/10.30651/jms.v10i1.25730.
Hendarto, Ilfa Sholikhah. “Implikasi Pengaruh Minimnya Pengaturan Perlindungan Privasi Data Pribadi Nasabah Pada Perbankan Digital.” Journal Justiciabelen (JJ) 4, no. 02 (2024): 129–40. https://doi.org/https://doi.org/10.35194/jj.v4i02.4440.
Jayanti Sukma Dewi, Birgitta Dian Saraswati. “Determinan Stabilitas Perbankan Di Indonesia: Pendekatan Makro Dan Mikro Prudensial.” Journal of Business and Banking 13, no. 2 (2024): 305–20. https://doi.org/https://doi.org/https://doi.org/10.14414/jbb.v13i2.4470.
Karimatul Khasanah, Mohd Mahyeddin Mohd Salleh. “Legal Frameworks for Consumer Protection in Digital Sharia Banking : A Comparative Study between Indonesia and Malaysia.” El-Qist: Journal of Islamic Economics and Business 15, no. 1 (2025): 45–65. https://doi.org/https://doi.org/10.15642/elqist.2025.15.1.45-65.
Moch Syahren Lazuardy, Maya Rachmawati, Tina Marlina, Jaenudin Umar. “Legal Framework for Protecting Bank Customers against Personal Data Leakage in the Digital Era : A Study of Indonesian Regulations.” Indonesian Journal of Multidisciplinary Science 3, no. 10 (2023): 1–4. https://doi.org/https://doi.org/10.55324/ijoms.v3i10.907.
Muhamad Naufal Aulia Azmi, Habib Saifudin, Cristine T Purba ,Asri Suryaningtyas, Urfani Syamuria Situmorang. “Analisa Kasus Kebocoran Data Pada Bank Indonesia Dalam Sistem Perbankan.” Jurnal Multidisiplin Ilmu Akademik 1, no. 6 (2024): 448–58. https://doi.org/https://doi.org/10.61722/jmia.v1i6.3267.
Muhammad Azfar Mulya Pratama, Pramukhtiko Suryokencono. “Tanggung Jawab Bank BSI Atas Kebocoran Data Nasabah.” Indonesian Journal of Law and Justice 3, no. 1 (2025): 1–17. https://doi.org/https://doi.org/10.47134/ijlj.v3i1.4804.
Muhammad Deckri Algamar, Abu Bakar Munir, Hendro. “Managing Indonesian Data Breach Notification In The Financial Services Sector: A Case For One-Stop Notification Model.” Journal of Central Banking Law and Institution 3, no. 3 (2024): 547–84. https://doi.org/https://doi.org/10.21098/jcli.v3i3.271.
Muhammad Faisal Aziz, Hamzah, Sepriyadi Adhan S. “Perlindungan Hukum Terhadap Nasabah Atas Penyalahgunaan Data Pribadi Oleh Pihak Bank Di Era Digitalisasi Perbankan.” Al-Zayn: Jurnal Ilmu Sosial & Hukum 3, no. 6 (2025): 8840–52. https://doi.org/https://doi.org/10.61104/alz.v3i5.2769.
Revalina Annisa Antoine, Najalya Siti Farizqa, Alifia Hafizha Hasna, Masta Pasaribu. “Penyalahgunaan Data Pribadi Dalam Teknologi Transaksi Digital Di Industri Perbankan Digital ( Studi Kasus PT . Bank Syariah Indonesia ).” Jurnal Multidisiplin Ilmu Akademik 2, no. 1 (2025): 316–27. https://doi.org/https://doi.org/10.61722/jmia.v2i1.3147.
Ririn Puspita Dewi, Diana Wiyanti. “Perlindungan Hukum Nasabah Atas Peretasan Data Pribadi Ditinjau Dari Undang Undang.” Journal Riset Ilmu Hukum 4, no. 2 (2024): 48–47. https://doi.org/https://doi.org/10.29313/jrih.v4i2.5193.
Siti Nurhaliza, Amelia Sri Ningsih, Dina Ismaini, Nurbaiti. “Keamanan Data Nasabah Bank Syariah.” Jurnal Multidisiplin Ilmu Akademik 2, no. 1 (2025): 651–62. https://doi.org/https://doi.org/10.61722/jmia.v2i1.3907.
Vicky Katiandagho, Diana Darmayanti Putong, Isye Junita Melo. “Undang-Undang Perlindunga Data Pribadi Memperkuat Undang-Undang Perbankan Dalam Menjaga Rahasia Data Nasabah Dan Untuk Melindungi Data Pribadi Masyarakat Indonesia.” Jurnal Hukum To-Ra : Hukum Untuk Mengatur Dan Melindungi Masyarakat 9, no. 1 (2023): 106–14. https://doi.org/https://doi.org/10.55809/tora.v9i1.212.
Vijain Sitanggang, Adensi Timomor, Athur N Tuawaidan. “Civilia : Kajian Hukum Perlindungan Data Pribadi Nasabah Dalam Sistem Mobile Banking Di Indonesia” 4, no. 1 (2025): 124–32. https://doi.org/https://doi.org/10.572349/civilia.v4i1.
Zainuddin, Muhammad, and Aisyah Dinda Karina. “USE OF NORMATIVE JURIDICAL METHODS IN PROVING THE TRUTH IN LEGAL RESEARCH.” Smart Law Journa 2, no. 2 (2023): 114–23. https://ejournal.unkaha.ac.id/index.php/slj/article/view/26.
Regulasi atau Peraturan Perundang-undangan:
Indonesia, Undang-Undang No. 10 Tahun 1998 Tentang Perbankan.
Indonesia, Undang-Undang No. 21 Tahun 2008 Tentang Perbankan Syariah.
Indonesia, Undang-Undang No. 27 Tahun 2022 Tentang Perlindungan Data Pribadi.
Indonesia, Undang-Undang No. 4 Tahun 2023 Tentang Pengembangan dan Penguatan Sektor Keuangan.
Website/Media Daring
Hardiansyah, Zulfikar. “Kronologi Layanan BSI Eror, Down Berhari-Hari Dan ‘Dipalak’ Hacker Ransomware Ratusan Miliar.” Kompas.com, Diakses 17 Mei 2023.
PT Bank Syariah Indonesia Tbk. “Privasi dan Keamanan Data Nasabah.” Bank Syariah Indonesia. Diakses 2 Juni 2026.
Downloads
Submitted
Accepted
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Nur Fauziah, Astika Nurul Hidayah, Marsitiningsih, Zeehan Fuad Attamimi
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under Attribution-ShareAlike 4.0 International that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
- This license requires that reusers give credit to the creator. It allows reusers to distribute, remix, adapt, and build upon the material in any medium or format, even for commercial purposes.
Journal of Indonesian Comparative of Syari'ah Law © 2018 by Auhtor is licensed under CC BY-SA 4.0
