<![CDATA[The rapid development of information technology has increased digital efficiency while simultaneously expanding exposure to cybercrimes, particularly cyber sabotage and cyber extortion. The 2017 WannaCry ransomware attack serves as a concrete example of these two modes operating simultaneously through data encryption and ransom demands. This study aims to analyze the legal protection afforded to victims of such attacks within the framework of Indonesia’s positive law. Using a qualitative juridical-normative method, the research examines relevant regulations, including the Electronic Information and Transactions Law (UU ITE) and the Indonesian Criminal Code (KUHP), alongside academic literature and reports related to the WannaCry incident in Indonesia. The findings indicate that the attack significantly affected public institutions, particularly hospitals, whose operational performance was disrupted by encrypted data and system inaccessibility. Although UU ITE and KUHP provide a legal basis for electronic extortion and system interference, they do not explicitly regulate ransomware as a distinct offense. Victim protection both preventive and repressive remains insufficient due to the absence of clear mechanisms for restitution or compensation. This study highlights the need for regulatory reform, enhanced law enforcement capacity, and stronger national cybersecurity resilience to provide more effective and comprehensive protection for victims of modern cybercrimes.]]>
Copyrights © 2026
