Indonesia Security Report — November 10, 2026

Security analysis based on open-source intelligence and web research. Period: November 03 — November 10, 2026.

Executive Summary

Indonesia experienced a period of heightened internal security concerns and a significant surge in cyber threats between November 03 and November 10, 2026. Over 20,000 military personnel were deployed to Jakarta following the arrest of three senior police generals implicated in an alleged illegal wiretapping operation targeting President Prabowo Subianto, a situation the presidential palace deemed "leading toward treason". Concurrently, the nation's financial sector faced a massive wave of cyberattack attempts, with over 1.2 million detections in a 24-hour period, prompting urgent calls for bolstered cybersecurity defenses from regulators. Diplomatically, Indonesia continued to strengthen its international partnerships, notably with the European Union, as both sides prepared for the signing of a Comprehensive Economic Partnership Agreement and discussed elevating their relationship to a Strategic Partnership. These developments underscore a complex security landscape marked by internal political sensitivities, persistent cyber vulnerabilities, and active diplomatic engagement.

Key Security Developments

• Military Deployment in Jakarta Amid Wiretapping Scandal
  Indonesia's military deployed more than 20,000 troops and personnel to the capital, Jakarta, starting November 2-4, 2026, to boost security amidst an investigation into an alleged illegal wiretapping operation. The deployment, which included personnel from marine and navy units, was described by military spokesmen as a routine measure for national security, though its timing coincided directly with the unfolding scandal. The presence of such a large number of troops, with an additional 13,140 on standby, highlights the gravity with which authorities are treating the internal security situation.

• Arrest of Senior Police Generals in Wiretapping Probe
  On November 3, 2026, Indonesian police announced the detention of three senior police generals—Listyo Sigit Prabowo (President Prabowo's chief of staff), Ahrie Sonta Nasution, and Eko Hadi Santoso—as suspects in an alleged illegal wiretapping operation. The unauthorized surveillance reportedly occurred between 2025 and 2026, targeting President Prabowo Subianto and other prominent figures, with allegations of evidence deletion in late October. The presidential palace stated that the alleged wiretapping could be considered "leading toward an act of treason" due to its potential to endanger state interests and national leadership.

• Massive Cyberattack Wave Targets Financial Sector
  Indonesia experienced a significant surge in cyberattack attempts, particularly targeting its banking, financial, and insurance industries. FortiGuard Labs reported approximately 350,600 cyber threat detections in Indonesia within 24 hours to November 7, with about 214,000 (61%) aimed at financial firms. By November 9-10, this escalated dramatically, with FortiGuard Labs recording over 1.2 million cyberattacks in 24 hours, of which approximately 711,000 targeted the financial sector. While no confirmed bank breaches or data thefts were reported, the Financial Services Authority (OJK) and Bank Indonesia activated their Computer Security Incident Response Team (CSIRT) and urged banks to strengthen their cyber defenses.

• Indonesia-China Joint Counter-Terrorism Training Concludes
  The "Sharp Knife 2026" joint army counter-terrorism training between China and Indonesia concluded with a ceremony in Guangzhou, China, on November 3, 2026. This exercise, which began on October 27, was a planned military exchange aimed at improving combat-oriented training capabilities and strengthening traditional friendship and cooperation between the two militaries. Troops from both countries participated in mixed groups, completing specialized sub-training, tactical coordination, and comprehensive drills, including land- and water-based rescue operations.

• Diplomatic Engagement with European Union
  On November 6, 2026, President Prabowo Subianto formally welcomed 11 new foreign ambassadors, including the Ambassador of the European Union to Indonesia, Hervé Delphin, at the Merdeka Palace in Jakarta. The EU Ambassador expressed belief that relations between Indonesia and the EU are entering a pivotal moment, with the planned signing of the Indonesia-European Union Comprehensive Economic Partnership Agreement (IEU-CEPA) and the elevation of relations to a strategic partnership. The IEU-CEPA is expected to be signed on November 21, 2026, and is seen by Indonesia as a facilitator for its accession to the OECD.

• Indonesia Champions Maritime Security at IMO
  Indonesia reaffirmed its commitment to enhancing seafarer protection and safeguarding international shipping lanes during the 138th session of the International Maritime Organization (IMO) Council in London, United Kingdom, from November 2 to 6, 2026. The Indonesian delegation emphasized the necessity of ensuring the safety of civilian mariners amid global geopolitical tensions and respecting freedom of navigation under international law. Indonesia also called for stronger cooperation between coastal states and the UN maritime body, advocating for diplomatic frameworks that prioritize de-escalation and dialogue.

• Showcase of Multi-Domain Military Exercise at ASEAN Forum
  Indonesia showcased its "Exercise Trident Resolve 2026" at the 13th ASEAN Defense Ministers' Meeting Plus (ADMM-Plus) in Cebu, Philippines, on October 29, 2026, with the report released on November 2, 2026. This exercise, previously conducted in Banten in September 2026, was the first within the ADMM-Plus framework to combine three expert working group areas: Humanitarian Assistance and Disaster Relief (HADR), Military Medicine, and Cybersecurity. The presentation highlighted Indonesia's efforts in multi-domain integration and strengthening defense cooperation among ASEAN member states and dialogue partners.

Cyber Threat Landscape

Indonesia's cyber threat landscape during this period was dominated by an unprecedented volume of attack attempts, particularly targeting the financial sector. FortiGuard Labs reported approximately 350,600 cyber threat detections in Indonesia within 24 hours to November 7, with about 214,000 of these aimed at banking, financial, and insurance firms. This surge intensified, with over 1.2 million cyberattacks recorded in a 24-hour period by November 9-10, and the financial sector absorbing approximately 711,000 of these attempts. The technology industry and government sectors also experienced significant numbers of attacks, with 434,000 and 163,000 hits respectively, as of November 9.

Despite the high volume of detections, no confirmed breaches, data thefts, or money thefts from Indonesian banks were reported during this period. In response, the Financial Services Authority (OJK) and Bank Indonesia (BI) activated their Computer Security Incident Response Team (CSIRT) and urged banks to enhance their digital security layers and implement immediate preventive measures, including real-time monitoring of high-value transfers and suspension of anomalous transactions. Coordinating Minister for Economic Affairs Airlangga Hartarto described the global wave of breaches as a direct test of the country's cyber resilience.

Background: Threat actors known to target Indonesia include ToddyCat, LOTUS PANDA (China-linked), APT17 (China-linked), Naikon (China-linked), GOBLIN PANDA (China-linked), and Hellsing (China-linked). Notable cyber incidents on record include the August 2026 Gunra Ransomware attack on an Indonesian Agri-Biotech Manufacturer, the September 2026 SecFlow Campaign using commercial AI agents against Taiwanese and Indonesian Government Targets, and the August 2026 deployment of a shared BlueMoon Chrome and Windows zero-day exploit kit by four nation-state actors.

Geopolitical Impact and Regional Dynamics

The internal security developments in Indonesia, particularly the wiretapping scandal and the subsequent military deployment in Jakarta, introduce a degree of political uncertainty that could subtly influence regional perceptions of stability. While officials maintain the military deployment is routine, the context of alleged treasonous acts by senior police generals against the President could be viewed by regional and major powers as an indicator of internal political tensions. This internal focus might temporarily divert attention from broader regional initiatives, though Indonesia's continued engagement in forums like the ADMM-Plus demonstrates its commitment to regional defense cooperation.

Indonesia's relations with major powers during this period show a diversified approach. The conclusion of the "Sharp Knife 2026" joint counter-terrorism training with China in Guangzhou underscores ongoing military and security cooperation with Beijing. This engagement aligns with Indonesia's non-aligned foreign policy, balancing relationships with various global actors. With the United States, while no direct military or diplomatic news emerged in this specific week, previous defense acquisition discussions (e.g., F-15EX uncertainty) and the confirmed plan to acquire Chinese J-10CE fighters (from Oct 2025 news) indicate Indonesia's strategic diversification in defense procurement.

The strengthening ties with the European Union, marked by the upcoming CEPA signing and the elevation to a Strategic Partnership, highlight Indonesia's efforts to broaden its economic and diplomatic influence beyond traditional partners. Indonesia's active role in the IMO Council, advocating for seafarer protection and freedom of navigation, reinforces its commitment to maritime security in a broader global context, which is crucial for regional stability given its archipelagic nature and strategic sea lanes. The emphasis on cybersecurity in the ADMM-Plus exercise also reflects a growing regional awareness of shared digital threats and the need for collaborative responses.

EU Relations and Implications

Indonesia's relations with the European Union saw significant forward momentum during this period. On November 6, 2026, President Prabowo Subianto formally welcomed the new EU Ambassador to Indonesia, Hervé Delphin, who expressed optimism that the relationship is entering a "pivotal moment" and a "new chapter". A key development is the preparation for the signing of the Indonesia-European Union Comprehensive Economic Partnership Agreement (IEU-CEPA), which EU member state ambassadors prepared on November 4, 2026, with a planned signing date of November 21, 2026. This agreement is crucial as Indonesia is set to leave the EU's Generalised Scheme of Preferences on January 1, 2027.

The IEU-CEPA is not only expected to boost trade and investment but is also viewed by Indonesia as a significant step towards gaining membership in the Organization for Economic Co-operation and Development (OECD), given that EU economies constitute a majority of the OECD members. Beyond trade, discussions between the EU and Indonesia have previously encompassed cooperation in digital and maritime security, aiming to enhance resilience, governance, and capacity in these domains. The stable outlook for EU-Indonesia relations, as assessed in August 2026, is reinforced by these diplomatic and economic advancements. The ongoing cyber threats in Indonesia, particularly against critical financial infrastructure, underscore the relevance of existing EU digital cooperation projects like SCOPE Digital – Copernicus Earth Observation Southeast Asia, and highlight potential areas for further collaboration in cyber resilience and information sharing to protect mutual interests.

Military and Defense Analysis

Indonesia's military posture during this period was notably characterized by a large-scale internal security deployment. Over 20,000 Indonesian National Armed Forces (TNI) personnel were deployed to Jakarta between November 2 and 4, 2026, with an additional 13,140 on standby, in response to an alleged wiretapping scandal involving senior police generals. While military officials described this as a routine measure to maintain national security and territorial integrity, the sheer scale of the deployment underscores a significant internal focus for the armed forces.

In terms of modernization programs and capability developments, Indonesia continues its efforts to upgrade its aging military assets. While specific new acquisitions were not announced within the November 3-10 window, previous reports indicate ongoing procurement efforts. These include the acquisition of 42 Rafale fighter jets from France, 5 C-130J Super Hercules transport aircraft, 8 H225M helicopters, and 18 Harimau medium tanks (a collaboration with Turkey). Indonesia has also taken delivery of Italian Offshore Patrol Vessels (PPA) and contracted for Turkish Istanbul-class frigates, alongside building domestic Red White-class frigates. The country is also building two Scorpene-class submarines with French technology transfer and developing autonomous AI-driven unmanned submarines. Furthermore, Indonesia confirmed plans to acquire 42 Chinese-built Chengdu J-10 fighter aircraft, with a budget allocation of $9 billion for fiscal year 2026. The deployment of Turkish-built Roketsan KHAN/Bora short-range ballistic missile systems provides the Indonesian Army with a 300-kilometer strike range. These diverse acquisitions reflect Indonesia's strategy of diversifying its defense suppliers and enhancing its layered air defense posture and naval capabilities, with a stated defense budget of Rp 187.1 trillion ($11.4 billion) for 2026.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, Indonesia is likely to remain preoccupied with the fallout from the wiretapping scandal and the investigation into the implicated police generals. This internal political dynamic will continue to be a significant focus, potentially influencing public discourse and government priorities. The large military deployment in Jakarta, while officially routine, suggests a sustained readiness for potential internal security challenges. On the cyber front, the high volume of attacks on the financial sector indicates that Indonesian organizations will continue to face intense pressure, necessitating sustained vigilance and investment in cybersecurity infrastructure. The upcoming signing of the IEU-CEPA on November 21, 2026, will mark a significant diplomatic and economic milestone, likely leading to increased trade and investment discussions with the EU.

Critical flashpoints and risk areas: The primary critical flashpoint remains the political stability surrounding the wiretapping investigation. Any perceived lack of transparency or political maneuvering could exacerbate public distrust and potentially lead to social unrest, particularly with planned demonstrations for National Heroes Day on November 10. The ongoing high volume of cyberattacks, especially if a major breach were to occur in the financial sector, poses a significant risk to economic stability and public confidence. Regionally, while no immediate flashpoints were observed, Indonesia's balancing act between major powers like China and the US, as evidenced by its diversified defense acquisitions and joint exercises, will require careful diplomatic navigation to maintain regional stability.

Indicators to monitor: Key indicators to monitor include the progress and transparency of the wiretapping investigation, particularly regarding the motives of the detained generals and any further implications for national leadership. The effectiveness of the government's and financial sector's enhanced cybersecurity measures in mitigating future attacks will be crucial. Diplomatically, the successful signing and implementation of the IEU-CEPA, along with progress on Indonesia's OECD accession, will indicate the trajectory of its international economic and political integration. Domestically, public reaction to the political events and the overall stability in Jakarta will be important barometers.

Strategic recommendations: Indonesia should prioritize a swift, transparent, and impartial resolution to the wiretapping scandal to restore public trust and minimize internal political instability. Simultaneously, a robust national cybersecurity strategy, coupled with increased investment and public-private collaboration, is essential to counter the persistent and escalating cyber threats, particularly in critical infrastructure sectors. Leveraging the momentum from the IEU-CEPA, Indonesia should actively pursue deeper economic and digital cooperation with the EU, including technical assistance and capacity building in cybersecurity. Furthermore, maintaining a balanced and pragmatic foreign policy, engaging constructively with all major powers while upholding its national interests, will be vital for navigating complex geopolitical dynamics and ensuring regional peace and stability.

Sources

• telemundonebraska.com
• asiaone.com
• click2houston.com
• asianews.network
• intimedia.id
• antaranews.com
• thejakartapost.com
• antaranews.com
• jakartaglobe.id
• wisevoter.com
• asiabusinessinfo.com
• jakartaglobe.id
• youtube.com
• batamnewsasia.com
• newsmax.com
• yourvalley.net
• idahostatejournal.com
• chainaiwire.com
• nation.com.pk
• setkab.go.id
• observerid.com
• antaranews.com
• kompas.com
• asianews.network
• blogspot.com
• sdarabia.com
• europa.eu
• kompas.id
• thestar.com.my
• ces-intelligence.com