Analisis Keamanan Data Pengguna pada Platform E-commerce: Studi Kasus Kebocoran Data Tokopedia 2020
DOI:
https://doi.org/10.62671/jikum.v2i1.174Keywords:
data security, e-commerce, data breach, Tokopedia, personal data protectionAbstract
The rapid growth of e-commerce platforms has increased the collection and processing of users’ personal data, which consequently raises security risks. One of the most significant incidents in Indonesia was the Tokopedia data breach in 2020. This study aims to analyze user data security issues on e-commerce platforms through a case study of the Tokopedia data breach. The research method uses a descriptive qualitative approach based on literature review and secondary data analysis. The results indicate that data breaches are influenced not only by technical vulnerabilities but also by weaknesses in data governance and security management. This study also reviews the incident from a legal perspective based on Indonesia’s Personal Data Protection Law. The findings are expected to contribute to improving data security practices on e-commerce platforms.
References
(NIST), N. I. of S. and T. (2020). Computer Security Incident Handling Guide.
Brown, W. S. L. (2018). Computer Security: Principles and Practice (4th Edition). Pearson.
Burhan, F. A. (2021). Tokopedia Ungkap Cara Atasi Kasus Kebocoran Data Pribadi. KataData.
Kompas.com. (2020). Fakta di Balik Bobolnya 91 Juta Data Pengguna Tokopedia. https://tekno.kompas.com/read/2020/05/03/10230027/fakta-di-balik-bobolnya-91-juta-data-pengguna-tokopedia
News, A. (2020). Pakar keamanan siber ungkap kronologi kebocoran data Tokopedia. https://www.antaranews.com/berita/1463133/pakar-keamanan-siber-ungkap-kronologi-kebocoran-data-tokopedia
Pfleeger, C. P., Pfleeger, S. L., & John, M. (2015). Security in Computing, Fifth Edition. Computers & Security, 16(5), 181. https://testbankati.com/wp-content/uploads/2020/10/9780134085043_SolutionManual_ch1.pdf
Stallings, W. (2017). Cryptography and Network Security: Principles and Practices. In Cryptography and Network Security (4th ed.). Prentice Hall. http://www.amazon.com/Cryptography-Network-Security-William-Stallings/dp/0131873164
Standardization., I. O. for. (2022). ISO/IEC 27001:2022 Information Security, Cybersecurity and Privacy Protection — Information Security Management Systems — Requirements.
Undang-Undang Republik Indonesia Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi (2022).
Vanstone, A. J. M. P. C. van O. S. A. (2018). Handbook of Applied Cryptography. CRC Press.
