A series of cyber-attacks have hit Indonesian companies and government agencies in the past few years, which experts attribute to the government’s lax protection on personal data.

Teguh Aprianto, a cybersecurity expert, posted a screenshot on social media platform X on Wednesday containing the samples of national and taxpayer identification numbers of six million Indonesians, including Jokowi’s and some of his ministers.

The tax agency is looking into the “circulating information of a data breach,” Dwi Astuti, an official with the agency said late on Wednesday without providing details.

Reuters could not immediately confirm the legitimacy of the data breach. Widodo’s office did not immediately respond to a request for comment.

Teguh told Reuters exposing taxpayer data could attract targeted attacks from scam operations, which “could result in material or immaterial loss,” adding it could also expose people’s earnings or transactions data.

The alleged breach follows a ransomware attack in June that paralysed several government services such as immigration and operations at major airports, prompting the government to conduct an audit.