Journal of Digital Law and Policy
Vol. 5 No. 3 (2026): Journal of Digital Law and Policy

Evaluating Cybercrime as a Violation of IT Professional Ethics: A Case Study Analysis of the 2020–2025 Ransomware Attacks

Luh Putu Cintya Karmayanti (Institut Bisnis dan Teknologi Indonesia)
Kadek Agus Raditya Adi Dharma (Institut Bisnis dan Teknologi Indonesia)
Ida Bagus Alit Sukabawa (Institut Bisnis dan Teknologi Indonesia)
Ida Bagus Nyoman Mahadivya Sutha (Institut Bisnis dan Teknologi Indonesia)
Lalu Ginandjar Hendru Alamsyah (Institut Bisnis dan Teknologi Indonesia)



Article Info

Publish Date
31 May 2026

Abstract

Ransomware attacks are a form of cybercrime that has seen a significant increase during the digital transformation era, causing serious impacts on information system security, service continuity, and public interests. This research aims to evaluate cybercrime as a violation of the professional code of ethics for information technology thru a case study analysis of ransomware attacks that occurred between 2020 and 2025. This research employs a descriptive qualitative approach with literature review and document analysis methods, encompassing scientific publications, cybersecurity reports, policy documents, and professional codes of ethics for information technology. The research results indicate that many ransomware attacks are closely related to weak information system security governance, professional negligence, and a lack of competence and ethical awareness in system management. This condition reflects a violation of the core principles of the information technology professional code of ethics, specifically the principles of responsibility, professional competence, integrity, and protection of public interest. Additionally, an analysis of the national cybersecurity landscape thru the National Cyber Security Index (NCSI) indicates that despite an increase in Indonesia's score and ranking in 2023, strengthening technical aspects must be balanced with consistent ethical and professional practices at both the individual and organizational levels. This research concludes that preventing and mitigating ransomware attacks cannot rely solely on technical solutions, but requires integration between system security governance, professional competence enhancement, and adherence to the professional code of ethics for information technology to support cyber resilience and safe and sustainable digital transformation.

Copyrights © 2026






Journal Info

Abbrev

jdlp

Publisher

Subject

Law, Crime, Criminology & Criminal Justice

Description

Journal of Digital Law and Policy cover issues regarding law and policy in realm of digitalization. To seek any legal analysis and case reports to academics, legislators, professionals and industries in the following scope : Intellectual Property Right Consumer Protection Law Electronic Transactions ...