Key insights and market outlook
PT Kereta Api Indonesia (KAI) has taken swift action against an employee of its subsidiary, KAI Services, for misusing passenger personal data. The incident involved an employee accessing and sharing passenger information without authorization, prompting KAI to strengthen its data security measures and commit to maintaining customer trust. The company has sanctioned the involved employee and is enhancing its data management and access controls.
PT Kereta Api Indonesia (KAI) has addressed a serious data privacy incident involving an employee from its subsidiary, PT Reska Multi Usaha (KAI Services). The employee allegedly accessed and misused passenger personal data, contacting a female passenger without their prior consent or shared contact information 1
KAI has taken immediate action by sanctioning the involved employee and committing to enhance its data security measures 3
The incident came to light when a female passenger reported on social media that a man sitting next to her on a train had accessed her personal information and contacted her via messaging, despite not sharing contact details. Investigation revealed that the man was an employee of KAI Services, who had misused his access privileges to obtain and share her data 2
In response to the incident, KAI is enhancing its data management systems and improving access controls to prevent similar breaches in the future. The company is prioritizing the security of customer data as part of its commitment to responsible service delivery 1
Data Breach Incident
Employee Sanction
Data Security Enhancement