Ransomware Attacks and Criminal Accountability: Contemporary Issues in Indonesian Cybercrime Enforcement

Abstract

Ransomware attacks have become one of the most disruptive forms of cybercrime globally, including in Indonesia, targeting government institutions, businesses, and critical infrastructure. These attacks pose significant challenges for criminal accountability due to anonymity of perpetrators, cross-border execution, and use of encrypted technologies. This article analyzes the legal and enforcement challenges associated with ransomware crimes in Indonesia. Using normative legal research and doctrinal analysis, the study examines the adequacy of existing cybercrime provisions under Indonesian law in addressing ransomware-related offences. The findings indicate that while ransomware activities may be prosecuted under general cybercrime and electronic information laws, the absence of specific legal categorization creates interpretive and enforcement difficulties. Challenges also arise in attribution of liability, recovery of digital assets, and international cooperation in tracing perpetrators. The article argues that Indonesia’s current legal framework requires modernization to effectively respond to ransomware threats. It proposes the development of specialized cybercrime regulations, enhanced incident response mechanisms, and stronger collaboration with international cybersecurity agencies. The study concludes that effective criminal accountability for ransomware attacks depends on integrating legal reform with technological and institutional capacity-building.