Jakarta. The Jakarta Metropolitan Police are investigating whether a 22-year-old suspect identified as WFT is the person behind the notorious hacker alias “Bjorka,” which once rocked Indonesia’s cyberspace.

Deputy Director of Cybercrime at the Jakarta Police, AKBP Fian Yunus, said investigators have found that WFT has used the username “Bjorka” since 2020. However, he cautioned that this single digital trace is not enough to confirm the suspect’s identity.

“This is only one piece of digital evidence. Is he really the person behind it? We can’t confirm that yet. Other evidence is still being analyzed at the forensic laboratory,” Fian told reporters on Saturday.

The case began after a 38-year-old representative of a private bank, identified as DH, reported an X account under the handle @bjorkanesiaaa for posting screenshots from a banking app and claiming to have hacked 4.9 million customer data entries. The account also reportedly announced on the dark web that the stolen data would be sold.

Following six months of investigation, the Jakarta Police’s Cybercrime Unit arrested WFT in Minahasa, North Sulawesi, on Sept. 23. Authorities said no financial losses occurred due to the swift action of the bank and law enforcement.

Herman Edco Wijaya Simbolon, head of the Sub-Directorate IV of Cybercrime, said the suspect’s actions amounted to illegal access and attempted extortion. However, he added that investigators are still working to determine whether WFT is linked to the “Bjorka” responsible for major data leaks in 2022–2023.

“The results of digital forensic analysis will show whether WFT is truly Bjorka or merely an impersonator,” Herman said.

Shortly after police announced WFT’s arrest, another social media account named Bjorkanism, which has around 59,000 followers on Instagram, posted a cryptic message implying that the real hacker remains at large.

“You think it’s me? Everyone uses my name, but you don’t realize I’m still free. The one who appeared in 2022,” the post read.