April 2026 X / dark-web monitoring posts (e.g., DailyDarkWeb) alleged a Jombang Bapenda leak on the order of ~100,000 records with citizen, phone, and tax-service metadata. No matching mainstream Indonesian outlet confirmation was indexed at entry time—treat as OSINT pending agency statements.
Canonical record: Jombang Bapenda 2026 on BreachHistory.
Source: DailyDarkWeb (X)