Indonesia Security Report — November 12, 2026

Security analysis based on open-source intelligence and web research. Period: November 05 — November 12, 2026.

Executive Summary

Indonesia experienced a period of heightened internal political and cyber security activity between November 05 and November 12, 2026. A significant military deployment of over 20,000 troops occurred in Jakarta following an alleged wiretapping scandal targeting President Prabowo Subianto, leading to the detention of three senior police generals and raising concerns of "treason". Concurrently, the nation's banking and financial sectors were subjected to an intense wave of cyberattacks, with over 1.2 million attempts recorded in a 24-hour period, prompting urgent calls for enhanced cybersecurity measures from regulators. Diplomatically, Indonesia made substantial progress with the European Union, with the Comprehensive Economic Partnership Agreement (CEPA) nearing its planned signing on November 21, 2026, a critical step before Indonesia's exit from the EU's trade preference scheme. These developments underscore a complex security landscape marked by internal political fragility, persistent digital threats, and active international engagement.

Key Security Developments

• Military Deployment Amid Wiretapping Scandal
  The Indonesian National Armed Forces (TNI) deployed over 20,000 troops and personnel to Jakarta between November 4 and 5, 2026, following an investigation into an alleged illegal wiretapping operation targeting President Prabowo Subianto. Three senior police generals were detained in connection with the probe, which the presidential palace described as potentially "tending towards treason". TNI spokesperson Major General Muhammad Nas stated the deployment was under 'Alert Level 3,' a normal state of readiness for maintaining national security, though it coincided with sensitive political developments.

• Vice President's Resignation and Political Uncertainty
  On November 11, 2026, Indonesia's Vice President Gibran Rakabuming Raka signaled his intention to resign to President Prabowo Subianto, citing "evolving dynamics" related to Constitutional and Supreme Court rulings on his education documents. This move, which comes amidst parliamentary scrutiny, has introduced a degree of political uncertainty, although the ambiguity surrounding the formal resignation process allows the president to control timing and shifts political costs to parliament.

• Surge in Cyberattacks on Financial Sector
  Indonesian banks, finance, and insurance industries were hit by a significant wave of cyberattacks, with FortiGuard Labs reporting over 1.2 million attempts in a 24-hour period as of November 9-10, 2026. The Financial Services Authority (OJK) and Bank Indonesia (BI) activated their Computer Security Incident Response Teams (CSIRT) and urged banks to strengthen their cybersecurity defenses, including implementing real-time monitoring and suspending anomalous transactions. Kaspersky listed Indonesia as the 32nd most-attacked country globally on November 9.

• Progress Towards EU-Indonesia Trade Pact Signing
  The European Union and Indonesia are set to sign the Comprehensive Economic Partnership Agreement (IEU-CEPA) on November 21, 2026. This follows preparations by EU member state ambassadors on November 4, 2026, and is driven by Indonesia's impending exit from the EU's Generalised Scheme of Preferences on January 1, 2027. The agreement aims to liberalize approximately 98 percent of tariff lines, enhancing market access for key Indonesian exports.

• Indonesia Advocates for Stronger ASEAN Military Cooperation
  During the 13th ASEAN Defence Ministers' Meeting-Plus (ADMM-Plus) in Cebu, Philippines, on October 29, Indonesia's Deputy Defense Minister Richard Taruli Horja Tampubolon proposed expanded joint training, practical defense initiatives, and closer coordination among Southeast Asian nations. He highlighted Exercise Trident Resolve 2026, held in Indonesia in September, as an example of multinational cooperation integrating humanitarian assistance, military medicine, and cybersecurity.

• Diplomatic Engagements with New Envoys
  On November 6, 2026, President Prabowo Subianto formally welcomed 11 new foreign ambassadors, including the European Union's envoy, Hervé Delphin, at the Merdeka Palace in Jakarta. The President emphasized Indonesia's commitment to deepening bilateral cooperation and strategic partnerships, with the EU Ambassador noting that relations are entering a pivotal moment with the planned CEPA signing and elevation to a strategic partnership.

• Indonesian Navy Reviews Maritime Rescue Procedures
  The Indonesian Navy (TNI AL) participated in the Asia Pacific Naval Warfare Symposium 2026 in Sydney, Australia, from November 4 to 6, where it reviewed maritime search and rescue procedures. Discussions focused on lessons learned from the sinking of the Iranian warship IRIS Dena, emphasizing the importance of rapid rescue responses and international cooperation during armed conflicts at sea.

• Indonesia Champions Seafarer Protection at IMO
  Indonesia reaffirmed its commitment to enhancing seafarer protection and safeguarding international shipping lanes during the 138th session of the International Maritime Organization (IMO) Council in London from November 2 to 6, 2026. The Indonesian delegation emphasized the necessity of shielding civilian mariners amid global geopolitical tensions and respecting freedom of navigation under international law.

• Bilateral Security Cooperation with the Philippines
  On November 2, 2026, the Philippines and Indonesia agreed to accelerate the adoption of a new five-year plan of action aimed at deepening bilateral cooperation in maritime security, economic relations, and border management. This agreement was reached during a meeting between Foreign Affairs Secretary Theresa Lazaro and Indonesia's newly appointed Foreign Minister Arrmanatha Christiawan Nasir in Manila.

• Diplomatic Push for ICAO Council Seat
  Indonesia's Transportation and Foreign Affairs Ministries are intensifying diplomatic efforts to secure global backing for Indonesia's bid to join the Council of the International Civil Aviation Organization (ICAO). This campaign precedes the 43rd ICAO Extraordinary Assembly Session in Montreal from November 19–20, 2026, where Indonesia is vying for a Category III Council seat, having garnered written support from 28 countries and verbal indications from 69 others by November 6, 2026.

Cyber Threat Landscape

Indonesia's cyber threat landscape during this period was dominated by a significant wave of attacks targeting its financial sector. FortiGuard Labs reported over 1.2 million cyberattack attempts against Indonesian banking, finance, and insurance industries in a 24-hour period as of November 9-10, 2026. This surge prompted the Financial Services Authority (OJK) and Bank Indonesia (BI) to activate their Computer Security Incident Response Teams (CSIRT) and issue directives for banks to enhance their digital security layers, including real-time monitoring of high-value transfers and immediate suspension of anomalous transactions. Cybersecurity firm Kaspersky also listed Indonesia as the 32nd most-attacked country globally on November 9. While the high volume of detected threats does not necessarily confirm successful breaches, it underscores the persistent and intense targeting of Indonesia's critical financial infrastructure.

No specific state-sponsored or criminal threat actors were explicitly named in the news reports as being active against Indonesia during this precise reporting period (November 05-12, 2026). Similarly, no new exploited vulnerabilities were identified in the news for this timeframe. The Indonesian government's response has focused on strengthening resilience through regulatory guidance, activation of incident response teams, and mandating regular penetration testing, cyberattack simulations, and IT audits for banks. Indonesia has also called for closer ASEAN-Japan cooperation to combat escalating cross-border cyber threats, particularly in the context of evolving Agentic AI, emphasizing the need for robust AI governance and "Security by Design" architecture.

Background: Threat actors known to target Indonesia include APT17, ToddyCat, LOTUS PANDA, Naikon, GOBLIN PANDA, and Hellsing. Threat actors named in its news in the last 30 days include GhostEmperor and UAT-9244. Exploited vulnerabilities named in its news in the last 90 days include CVE-2026-0257 (Palo Alto Networks PAN-OS), CVE-2026-63077 (JetBrains TeamCity), CVE-2026-45659 (Microsoft SharePoint Server), CVE-2026-59310 (Broadcom VMware vCenter), CVE-2025-14733 (WatchGuard Firebox), and CVE-2026-15410 (SonicWall SMA1000 Appliances).

Geopolitical Impact and Regional Dynamics

Indonesia's recent security developments carry significant geopolitical implications, particularly within Southeast Asia and its relations with major global powers. The internal political instability stemming from the wiretapping scandal and the Vice President's resignation could divert governmental focus from external strategic initiatives, potentially impacting its leadership role within ASEAN. Despite these internal challenges, Indonesia actively pushed for deeper ASEAN military cooperation and emphasized regional solidarity at the ADMM-Plus meeting, showcasing its commitment to a stable and secure Indo-Pacific. This proactive stance in regional defense, including joint exercises like Trident Resolve 2026, aims to enhance collective capabilities and foster diplomatic ties among member states and partners.

Indonesia's diplomatic efforts extend beyond military cooperation, as evidenced by its push for a new five-year plan with the Philippines focusing on maritime security and border management. This bilateral initiative, alongside Indonesia's advocacy for seafarer protection and freedom of navigation at the IMO, highlights its commitment to maintaining stability in crucial maritime zones, including those potentially affected by South China Sea disputes. The nation's active pursuit of an ICAO Council seat further demonstrates its ambition for greater influence in global governance and standard-setting.

Relations with major powers, particularly the European Union, saw positive momentum with the impending signing of the IEU-CEPA. This trade agreement is crucial for Indonesia to maintain market access post-GSP expiry and signifies a deepening of economic and strategic ties with Europe. While direct news regarding relations with the US, China, or Russia was not prominent in this specific period, President Prabowo's general statement on strengthening the TNI amid global uncertainty, including cyber threats and disinformation, reflects an awareness of broader geopolitical complexities and the need for a robust self-defense posture. The significant cyberattacks on Indonesia's financial sector also underscore the pervasive nature of digital threats, which often have state-sponsored origins or geopolitical motivations, implicitly involving major cyber powers.

EU Relations and Implications

Indonesia's relations with the European Union experienced a significant positive development during this period, primarily centered on the Comprehensive Economic Partnership Agreement (IEU-CEPA). EU member state ambassadors prepared for the agreement's signing and conclusion on November 4, 2026, with the official signing targeted for November 21, 2026. This accelerated timeline is critical as Indonesia is set to exit the EU's Generalised Scheme of Preferences (GSP) on January 1, 2027, making the CEPA essential for maintaining stable trade channels and market access for Indonesian products. The agreement is expected to liberalize approximately 98 percent of tariff lines, benefiting key Indonesian exports like palm oil derivatives, textiles, and footwear. On November 6, 2026, the new EU Ambassador to Indonesia, Hervé Delphin, presented his credentials, emphasizing that relations are entering a pivotal moment and that the CEPA and elevation to a strategic partnership will strengthen both parties amid global dynamics. The EU relationship outlook was assessed as stable in August 2026, and cooperation projects span trade & investment, development cooperation, climate & environment, infrastructure & transport, and education & skills. The EU also has digital projects like SCOPE Digital – Copernicus Earth Observation Southeast Asia in Indonesia.

The internal security and cyber developments in Indonesia have implications for EU interests and cooperation. The political uncertainty arising from the wiretapping scandal and the Vice President's resignation could introduce unforeseen complexities in governance and policy implementation, potentially affecting the smooth execution of the CEPA and other bilateral projects. Furthermore, the wave of cyberattacks on Indonesia's financial sector highlights a shared vulnerability in the digital domain. Given the EU's digital cooperation projects like SCOPE Digital, these cyber threats underscore the importance of robust cybersecurity frameworks and continued collaboration to protect shared digital infrastructure and data. The EU's interest in a stable and secure Indonesia, as a key partner in Southeast Asia, is directly impacted by both internal political stability and resilience against cyber threats.

Military and Defense Analysis

Indonesia's military and defense posture during this period was notably influenced by internal security concerns and a continued emphasis on regional cooperation. The Indonesian National Armed Forces (TNI) demonstrated its capacity for rapid internal deployment by mobilizing over 20,000 troops to Jakarta in response to an alleged wiretapping scandal. While officially categorized as a "normal state of readiness" (Alert Level 3), the scale of this deployment highlights the military's role in maintaining internal stability during sensitive political events. This internal focus, however, did not detract from Indonesia's external defense diplomacy.

In terms of modernization programs and capability developments, Indonesia continues to advocate for strengthening its armed forces. President Prabowo Subianto previously stressed the need for a stronger TNI to safeguard the nation against evolving threats, including cyberattacks and disinformation. This aligns with Indonesia's broader commitment to modernizing its armed forces and other military organizations to protect national sovereignty and monitor its vast maritime borders. The Indonesian Navy's participation in the Asia Pacific Naval Warfare Symposium 2026, where it reviewed maritime search and rescue procedures following the IRIS Dena incident, indicates a focus on enhancing operational readiness and international cooperation in maritime security. Furthermore, Indonesia's proposals for expanded joint training and practical defense initiatives within ASEAN, exemplified by Exercise Trident Resolve 2026, underscore a strategy to build collective regional capabilities and interoperability. While specific defense spending trends for this period were not detailed in the news, the consistent emphasis on modernization and regional defense cooperation suggests sustained investment in capability development.

Outlook and Forecast

Short-term trends (1-3 months) for Indonesia are likely to be characterized by continued efforts to manage internal political fallout and bolster cyber defenses. The immediate focus will be on the formal signing and subsequent ratification of the IEU-CEPA by November 21, 2026, and its entry into force by early 2027, which is crucial for Indonesia's trade relations with the EU. Internally, the investigation into the wiretapping scandal and the ambiguous status of the Vice President's resignation will likely continue to dominate domestic political discourse, potentially leading to further shifts in political alliances or government structure. The high volume of cyberattacks on the financial sector suggests that these threats will persist, necessitating sustained vigilance and proactive measures from Indonesian financial institutions and regulators.

Critical flashpoints and risk areas include the potential for escalation or prolonged uncertainty surrounding the wiretapping investigation, which could undermine public trust in institutions and create political instability. The resilience of Indonesia's critical infrastructure, particularly the financial sector, against sophisticated cyberattacks remains a significant risk area, with potential for economic disruption if defenses are breached. Geopolitically, while ASEAN cooperation is a strong theme, any internal instability could subtly affect Indonesia's capacity to project leadership in regional security dialogues, especially concerning complex issues like the South China Sea, even if not explicitly mentioned in this period's news.

Indicators to monitor include the progress and transparency of the wiretapping investigation, particularly regarding any further arrests or official statements. The formal submission and parliamentary approval process for the IEU-CEPA will be a key indicator of Indonesia's diplomatic and economic stability. Monitoring the frequency and sophistication of cyberattacks against Indonesian entities, along with the effectiveness of implemented cybersecurity measures, will be crucial. Additionally, observing the dynamics within the ruling political coalition and any public reactions to the Vice President's situation will provide insights into the country's internal political cohesion.

Strategic recommendations for Indonesia include prioritizing the swift and transparent resolution of the wiretapping scandal to restore public confidence and political stability. A robust national cybersecurity strategy, coupled with increased investment in cyber defense capabilities and international cooperation, is essential to mitigate the persistent threat of cyberattacks, especially against critical infrastructure. Continuing to actively engage in regional diplomatic and security forums, such as ASEAN and IMO, will reinforce Indonesia's role as a stable and influential regional actor, helping to counterbalance internal political distractions.

Sources

• indonesianow.co
• taiwannews.com.tw
• sfgate.com
• yourvalley.net
• ua.news
• asianews.network
• thestar.com.my
• hokanews.com
• thediplomaticinsight.com
• antaranews.com
• thejakartapost.com
• fintechnews.id
• wisevoter.com
• oananews.org
• antaranews.com
• antaranews.com
• antaranews.com
• gdnonline.com
• kba13.com
• clashreport.com
• antaranews.com
• antaranews.com
• setkab.go.id
• asiabusinessinfo.com
• rri.co.id
• antaranews.com
• manilastandard.net
• antaranews.com
• antaranews.com
• antaranews.com