Abil Sudarman agentic AI attack — Jan 2026

What happened

On January 27, 2026, Indonesian influencer Abil Sudarman reported a targeted cyberattack against his career development startup, ordal.id, and his personal social media accounts. The incident occurred approximately two hours after Sudarman published an Instagram reel criticizing a job posting by the Ministry of Communication and Digital (Komdigi) for exposing applicant data via an unprotected Google Drive link.

The attack on the startup's website involved the deployment of an AI agent that successfully bypassed existing AI-based security measures. This agent distributed over 16,000 fake job postings to the platform's 53,000 users. Sudarman described the incident as a purely destructive "denial of service" attack, noting that no data was stolen and no ransom demands were made.

Simultaneously, Sudarman’s social media presence was targeted. While attackers failed to breach his Instagram account, they successfully gained unauthorized access to his X (formerly Twitter) account. Sudarman observed suspicious login activity from devices he did not own, including a Xiaomi phone and an iPhone 13 Pro Max. Once inside the account, the attackers removed the video criticizing the Komdigi job posting from his profile. Sudarman noted that the video remained visible from his own device, suggesting a targeted effort to hide the content from his followers while keeping the account owner unaware of the deletion.

Sudarman characterized the attack as sophisticated, distinguishing it from the minor, opportunistic security probes he typically receives from students or pranksters. At the time of reporting, the identity of the attackers remained unknown, and Komdigi had not provided a response regarding the incident or the initial data exposure concerns raised by the influencer.