Indonesia Security Report — November 11, 2026

Security analysis based on open-source intelligence and web research. Period: November 04 — November 11, 2026.

Executive Summary

Indonesia experienced a dynamic security landscape between November 04 and November 11, 2026, marked by a significant internal political crisis and a surge in cyberattacks. A large-scale military deployment in Jakarta was initiated amidst an unfolding wiretapping scandal involving high-ranking police officials, with allegations of treason against President Prabowo Subianto. Concurrently, the nation's banking sector faced a wave of over 1.2 million cyberattack attempts within a 24-hour period, prompting urgent regulatory responses. Diplomatically, Indonesia advanced its trade relations with the European Union, with the Comprehensive Economic Partnership Agreement (CEPA) nearing its signing, and engaged in crucial discussions on maritime security with international partners. These developments highlight a period of heightened internal vigilance and proactive international engagement.

Key Security Developments

• Large-scale TNI Deployment in Jakarta
  From November 2nd, 2026, the Indonesian National Armed Forces (TNI) deployed over 20,000 personnel to Jakarta, with 2,100 initially, 5,740 arriving by November 4th, and an additional 13,140 on standby. This deployment was officially described by TNI Chief of Information Center Major General Muhammad Nas as a routine readiness protocol to maintain national security and stability, and to safeguard national sovereignty. TNI Commander General Agus Subiyanto further clarified on November 5th that this "alert" status is a measure against both natural and man-made threats, including social conflicts, terrorism, radicalism, and treason.

• Wiretapping Scandal and Treason Allegations
  A major political scandal erupted with the detention of three senior police generals on November 2nd, 2026, including former National Police Chief General Listyo Sigit Prabowo, Inspector General Ahrie Sonta, and Inspector General Eko Hadi Santoso. They are implicated in an alleged illegal wiretapping operation targeting President Prabowo Subianto, which reportedly occurred between 2025 and 2026. On November 5th, a fourth suspect, a senior law enforcement official identified as Slamet Uliandi (initials SU), was named for allegedly approving the wiretaps and subsequent deletion of interception records. The presidential palace has stated that the alleged surveillance could be considered an act "leading toward treason" due due to the sensitive nature of information accessible through a head of state's communications.

• Surge in Cyberattacks Targeting Banking Sector
  Between November 6th and November 9th, 2026, Indonesian banks were subjected to a significant wave of cyberattacks. FortiGuard Labs reported over 1.2 million attack attempts within a 24-hour period by Monday evening, November 9th, primarily targeting the banking, finance, and insurance industries. The technology sector and government also experienced substantial attacks. This surge prompted the Financial Services Authority (OJK) and Bank Indonesia (BI) to activate their Computer Security Incident Response Teams (CSIRT) and issue directives for banks to enhance their cybersecurity defenses.

• Advancement of EU-Indonesia Trade Agreement (CEPA)
  On November 4th, 2026, ambassadors from European Union member states prepared for the signing and conclusion of the EU-Indonesia Comprehensive Economic Partnership Agreement (CEPA). The formal signing of this crucial trade pact is scheduled for November 21st, 2026. Indonesia views this agreement as a significant step towards its potential accession to the Organization for Economic Co-operation and Development (OECD).

• Reception of New Foreign Ambassadors
  President Prabowo Subianto formally welcomed 11 new foreign ambassadors to Indonesia on November 6th, 2026, during a credential presentation ceremony at the Merdeka Palace. Among these was the Ambassador of the European Union, Hervé Delphin, who expressed optimism that relations between Indonesia and the EU are entering a pivotal new chapter. This event underscored Indonesia's commitment to strengthening bilateral cooperation and strategic partnerships globally.

• Commitment to Maritime Security and International Shipping Lanes
  Indonesia participated in the 138th session of the International Maritime Organization (IMO) Council in London, United Kingdom, from November 2nd to 6th, 2026. During the sessions, Indonesia reaffirmed its dedication to enhancing seafarer protection and safeguarding international shipping lanes, emphasizing the need for civilian mariners to be shielded amidst global geopolitical tensions. The Indonesian delegation urged stronger cooperation between coastal states and the UN maritime body, advocating for diplomatic frameworks to prioritize de-escalation and dialogue.

• Call for Deeper Maritime Cooperation with India
  On November 4th, 2026, Indonesia expressed a strong desire for deeper maritime cooperation with India. This call, highlighted by Aisha R. Kusumasomantri of Indonesia's Indo Pacific Strategic Intelligence, emphasized the strategic importance of the geographical proximity of India's Andaman and Nicobar Islands and Indonesia's Sabang Island. The aim is to address regional security challenges and protect vital trade and energy routes in the Indo-Pacific.

• ASEAN Diplomacy Amidst Singapore Haze Dispute
  A senior Indonesian diplomat stressed on November 4th, 2026, that dialogue within ASEAN "must not stop" despite ongoing diplomatic tensions with Singapore. The dispute stems from transboundary haze caused by Indonesian wildfires and Indonesia's decision to reduce natural gas exports to Singapore. Despite a recent visit by Singapore's Foreign Affairs Minister, the tensions continue to simmer ahead of upcoming ASEAN meetings.

Cyber Threat Landscape

Indonesia's cyber threat landscape was notably active during this period, primarily characterized by a significant wave of attacks targeting its financial sector. From November 6th to November 9th, 2026, Indonesian banks, along with the finance and insurance industries, were subjected to over 1.2 million cyberattack attempts within a 24-hour window. Data from FortiGuard Labs indicated these industries as the primary targets, with the technology and government sectors also experiencing hundreds of thousands of attacks. Cybersecurity firm Kaspersky ranked Indonesia as the 32nd most-attacked country globally on November 9th.

In response to this surge, the Financial Services Authority (OJK) and Bank Indonesia (BI) swiftly activated their Computer Security Incident Response Teams (CSIRT), known locally as TTIS. Regulators urged banks to heighten their alertness, implement preventive measures, and routinely conduct penetration tests, cyberattack simulations, and technology audits in accordance with digital resilience regulations. While the attacks were widespread, the available information does not attribute them to specific state-sponsored or criminal actors during this period. Cybersecurity expert Alfons Tanujaya noted that much of the recorded activity often involves automated scanning by botnets searching for vulnerabilities, rather than successful breaches.

Background: Threat actors known to target Indonesia include ToddyCat, LOTUS PANDA (China-linked), APT17 (China-linked), Naikon (China-linked), GOBLIN PANDA (China-linked), and Hellsing (China-linked). Recently named threat actors in Indonesian news (within the last 30 days) include GhostEmperor and UAT-9244. Notable cyber incidents on record include the August 2026 Gunra Ransomware attack, the September 2026 SecFlow Campaign using commercial AI agents, and the August 2026 deployment of a shared BlueMoon zero-day exploit kit by four nation-state actors. No specific exploited vulnerabilities (such as CVE-2026-0257, CVE-2026-63077, CVE-2026-45659, CVE-2026-59310, CVE-2025-14733, CVE-2026-15410) were reported as exploited during this specific period.

Geopolitical Impact and Regional Dynamics

The internal security developments in Indonesia, particularly the wiretapping scandal and the subsequent military deployment in Jakarta, introduce an element of political uncertainty that could subtly influence regional perceptions of stability. While Indonesian officials maintain that the military presence is for readiness and the security situation remains normal, the allegations of treason against high-ranking police officials highlight potential internal divisions that regional partners will likely monitor. This internal focus could temporarily divert some attention from broader regional issues, though Indonesia's diplomatic engagements suggest a continued commitment to its external agenda.

In terms of relations with major powers, Indonesia's ties with the European Union are poised for a significant upgrade with the impending signing of the CEPA. This agreement not only strengthens economic bonds but also signals a deepening strategic partnership, potentially enhancing the EU's influence in Southeast Asia. The welcoming of the new EU Ambassador by President Prabowo further solidifies this trajectory. Relations with China were not explicitly detailed in recent news for this period, but China-linked threat actors are known to target Indonesia, indicating an underlying cyber dimension to this relationship. Indonesia's expressed desire for deeper maritime cooperation with India underscores its strategy to diversify security partnerships and enhance its capacity to address challenges in the Indo-Pacific, particularly concerning vital trade and energy routes. This move aligns with broader regional efforts to maintain a balance of power amidst intensifying great-power competition.

Within ASEAN, Indonesia's diplomatic row with Singapore over transboundary haze and gas exports demonstrates the complexities of intra-regional relations. Despite these frictions, Indonesia's emphasis on continuous dialogue within ASEAN highlights its commitment to regional unity and the bloc's centrality in managing Southeast Asian affairs. Indonesia's active participation in the IMO Council also reinforces its role as a responsible maritime power, advocating for seafarer protection and freedom of navigation, which has implications for the broader strategic landscape of global supply chains.

EU Relations and Implications

Indonesia's relations with the European Union entered a crucial phase during this period, primarily driven by the imminent signing of the Indonesia-European Union Comprehensive Economic Partnership Agreement (IEU-CEPA). On November 4th, 2026, EU member state ambassadors prepared for the agreement's conclusion, with the signing slated for November 21st, 2026. This trade pact is not only expected to facilitate new market access and increase trade and investment but is also seen by Indonesia as a benchmark that will ease its accession process to the OECD. The formal reception of the new EU Ambassador, Hervé Delphin, by President Prabowo on November 6th, 2026, further underscored the mutual commitment to elevating relations to a strategic partnership, which is deemed beneficial amidst global geopolitical and geoeconomic uncertainties. The EU's relationship outlook with Indonesia was assessed as stable in August 2026.

The security and cyber developments in Indonesia have implications for EU interests and cooperation. The surge in cyberattacks on Indonesia's banking sector highlights a shared vulnerability in the digital domain, potentially impacting EU-funded digital cooperation projects like SCOPE Digital — Copernicus Earth Observation Southeast Asia. Enhanced cybersecurity measures in Indonesia would directly benefit the security of such joint digital initiatives. While the internal political instability stemming from the wiretapping scandal is primarily a domestic concern, any prolonged uncertainty could indirectly affect investor confidence, including from EU businesses involved in trade and investment cooperation projects. The ongoing dialogues and agreements, particularly the CEPA, demonstrate a robust framework for continued collaboration across various sectors, including trade & investment, development cooperation, climate & environment, infrastructure & transport, and education & skills.

Military and Defense Analysis

Indonesia's military posture during this period was notably characterized by a large-scale deployment of Indonesian National Armed Forces (TNI) personnel in Jakarta. From November 2nd, 2026, over 20,000 troops were deployed or placed on standby in the capital, a move officially attributed to maintaining readiness against various threats, including social conflicts, terrorism, radicalism, and treason. While officials stated the security situation remained normal, this significant show of force underscores the TNI's role in internal security and its capacity for rapid deployment in the nation's capital.

In terms of modernization programs and capability developments, recent reports (October 2026) indicate Indonesia's ongoing efforts to diversify its defense suppliers and acquire advanced equipment. This includes the commissioning of the former Italian aircraft carrier ITS Giuseppe Garibaldi as the KRI Sriwijaya-100 in September 2026, and contracts for 48 fifth-generation TAI KAAN fighter jets from Turkey, with deliveries planned from 2032. Indonesia has also acquired Rafale fighter aircraft, Italian Offshore Patrol Vessels (PPA), and contracted for Turkish Istanbul-class frigates. These acquisitions, alongside the deployment of Turkish-built Roketsan KHAN/Bora short-range ballistic missile systems, demonstrate a strategic shift towards enhancing both naval and air capabilities, as well as ground-based strike ranges. The emphasis on modern features, such as those in the Rafale fighter jet, reflects the government's effort to modernize the TNI in response to global conflicts, including the massive use of drones and armed conflicts at borders. While specific defense spending figures for this week were not available, the ongoing acquisition programs imply a sustained commitment to increasing defense expenditure.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, Indonesia is likely to remain preoccupied with the fallout from the wiretapping scandal. The investigation into the detained police generals and the allegations of treason will continue to unfold, potentially leading to further political shifts or public discourse. The large military deployment in Jakarta, while currently described as a readiness measure, will likely remain a visible aspect of the security posture, signaling continued vigilance. The banking sector will need to sustain its heightened cybersecurity defenses in response to the recent wave of attacks, with regulators pushing for stricter protocols and resilience measures. Diplomatically, the signing of the EU-Indonesia CEPA on November 21st, 2026, will be a key event, solidifying economic and strategic ties.

Critical flashpoints and risk areas: The primary flashpoint remains Jakarta, specifically the political stability surrounding the wiretapping scandal. Any escalation of political tensions or public discontent related to the investigation could challenge the current calm. The cybersecurity of critical infrastructure, particularly the financial sector, remains a significant risk area, requiring continuous monitoring and robust defensive strategies. While not explicitly a flashpoint this week, the South China Sea and other vital maritime chokepoints continue to be areas of strategic concern, influencing Indonesia's maritime security dialogues and cooperation efforts.

Indicators to monitor: Key indicators to monitor include the progress and outcomes of the wiretapping investigation, including any further arrests or official statements regarding the motives and scope of the alleged treasonous acts. Public and political reactions to these developments will be crucial. In the cyber domain, monitoring the frequency and sophistication of cyberattacks against Indonesian entities, particularly in the financial and government sectors, will indicate the evolving threat landscape. The ratification and implementation progress of the EU-Indonesia CEPA will also be an important economic and diplomatic indicator.

Strategic recommendations: Indonesia should prioritize strengthening its internal security mechanisms and governance to prevent future incidents of alleged wiretapping and abuse of power by state officials. A transparent and impartial investigation into the current scandal is paramount to restoring public trust and maintaining institutional credibility. Concurrently, a robust national cybersecurity strategy, coupled with continuous investment in advanced defensive technologies and human capital, is essential to protect critical infrastructure from persistent cyber threats. Diplomatically, Indonesia should continue to leverage its strategic partnerships, such as those with the EU and India, to enhance its economic resilience and maritime security capabilities, while actively promoting dialogue and de-escalation in regional disputes.

Sources

• jakartaglobe.id
• washingtonpost.com
• youtube.com
• kompas.com
• kompas.com
• kompas.com
• wsls.com
• indonesianow.co
• indonesianow.co
• kompas.com
• kalkine.ca
• aljazeera.com
• asianews.network
• thestar.com.my
• indonesianow.co
• antaranews.com
• jakartaglobe.id
• wisevoter.com
• jakartaglobe.id
• antaranews.com
• setkab.go.id
• asiabusinessinfo.com
• antaranews.com
• stratnewsglobal.com
• scmp.com
• theindependent.sg
• blogspot.com
• isi-indonesia.com
• kompas.id