Indonesia’s banking and financial sector has emerged as the biggest target of a major wave of cyber threats, with approximately 214,000 suspicious activities detected within 24 hours, according to monitoring data from FortiGuard Labs reported on November 7, 2026.

The figures have raised concerns about the cybersecurity of financial institutions as banks across Southeast Asia and Europe face growing digital threats.

A cybersecurity dashboard tracking activity across Indonesia reportedly recorded approximately 350,600 threat activities during the same monitoring period. Banking, financial services, and insurance accounted for the largest share of detected activity.

However, these figures represent detected threat activity rather than confirmed successful breaches. There is currently no verified evidence that the reported activity resulted in widespread intrusions into Indonesian banking systems or the theft of customer deposits.

Indonesian Banks Become the Main Target of Cyber Threat Activity

The latest cybersecurity figures highlight the growing pressure on Indonesia’s financial infrastructure.

Based on monitoring data reported by Indonesian media, the banking, financial services, and insurance sector recorded approximately 214,000 detected threat activities within 24 hours.

Government institutions and critical infrastructure were also among the targeted sectors, with approximately 79,000 activities reported during the same period.

The findings attracted attention after screenshots of FortiGuard Labs’ threat intelligence dashboard circulated across social media.

However, cybersecurity monitoring platforms continuously update their figures as new activity is detected. The numbers can change significantly depending on the monitoring time and reporting window.

The figures should therefore be understood as an indication of the scale of cyber threat activity rather than a confirmed count of successful cyberattacks.

Malaysia’s Bank Rakyat Faces Website Security Incident

Cybersecurity concerns have also emerged in neighbouring Malaysia.

Bank Rakyat experienced website disruptions on November 6, 2026, after several webpages were reportedly defaced. The incident attracted attention because the affected online pages included banking-related web portals.

The bank subsequently clarified that the disruption affecting its corporate website was related to a technical issue involving a third-party service provider.

In its public statement, Bank Rakyat assured customers that its banking systems, personal information, and deposits remained safe and unaffected.

Customers were also advised to continue using alternative digital banking services, including the iRakyat mobile application and other official banking channels.

Malaysia’s National Security Council also confirmed that the country’s national cyber threat level remained at moderate, while authorities continued monitoring cybersecurity developments involving financial institutions.

The incident highlights the potential risks associated with third-party technology providers, which can become an important security consideration for financial institutions.

French Bank Crédit Mutuel Arkéa Reports Approximately €100 Million Cyber Fraud

While Indonesia and Malaysia have faced cybersecurity concerns, a separate incident in France demonstrates how sophisticated attacks can affect major financial institutions.

French banking group Crédit Mutuel Arkéa confirmed that it had suffered a cyberattack involving fraudulent financial transactions.

According to reports, attackers accessed the bank through a third-party service provider’s platform and used an account belonging to the financial institution to initiate unauthorised transfers.

The incident involved approximately €100 million in potentially stolen funds, although the final amount remains subject to assessment.

The bank confirmed that its customers’ accounts and deposits were not affected. However, some transactions were temporarily suspended as a precaution while the institution strengthened its security measures.

Crédit Mutuel Arkéa also confirmed that it had contacted relevant authorities and was working to investigate the incident and recover the funds.

The case demonstrates that cybercriminals do not necessarily need to compromise individual customer accounts to cause substantial financial damage. Vulnerabilities involving external service providers can also create serious risks for banking infrastructure.

Why Cybersecurity Is Becoming Critical for Banks

Modern banking increasingly depends on interconnected digital systems, cloud infrastructure, mobile applications, payment networks, and external technology providers.

While these technologies make financial services more convenient, they also create additional opportunities for cybercriminals.

Financial institutions are attractive targets because they process large volumes of transactions and maintain valuable customer information.

Common threats facing the banking industry include:

• Phishing attacks: Fraudulent messages designed to steal banking credentials and personal information.
• Ransomware: Malicious software that locks systems or encrypts sensitive data.
• Distributed Denial-of-Service (DDoS): Attacks that overwhelm online services with excessive traffic.
• Third-party vulnerabilities: Security weaknesses in external platforms and service providers connected to banking systems.
• Account compromise: Unauthorised access to digital banking accounts through stolen credentials.

As cybercriminals develop increasingly sophisticated techniques, banks must continuously improve their security infrastructure and incident response capabilities.

What Indonesian Banking Customers Should Do to Stay Safe

Although the reported threat activity does not confirm that Indonesian bank customers have lost money or had their accounts compromised, maintaining good digital security practices remains important.

Customers can take several precautions to protect their financial information:

1. Enable two-factor authentication whenever available.
2. Never share banking passwords, PINs, or one-time passwords (OTPs).
3. Avoid clicking suspicious links received through SMS, email, or messaging applications.
4. Download banking applications only from official app stores.
5. Avoid accessing financial accounts through unsecured public Wi-Fi networks.
6. Regularly review banking transactions and report suspicious activity immediately.

Customers should also be cautious of fraudulent messages claiming to provide information about recent cyberattacks. Criminals often exploit security incidents to launch phishing campaigns.

Global Banking Cybersecurity Risks Continue to Grow

The developments in Indonesia, Malaysia, and France highlight the growing importance of cybersecurity across the global financial industry.

Although the incidents are not confirmed to be connected, they demonstrate different ways cyber threats can affect financial institutions, ranging from large-scale malicious traffic to website defacement and sophisticated financial fraud.

For Indonesia, the high volume of detected activity targeting banking and financial services serves as an important reminder that digital banking security requires continuous attention.

As financial institutions become increasingly dependent on digital infrastructure, protecting customer information, payment systems, and banking operations will remain a major priority.

The challenge is no longer simply preventing hackers from accessing banking systems. Financial institutions must also ensure that their technology partners, digital infrastructure, and internal security controls are strong enough to withstand increasingly complex cyber threats.