Masih Pakai Windows 7? Beginilah SATUSEHAT Bisa Bocor dari Komputer Administrasi ( Integrasi Sistem Fasyankes yang Lemah )

🔀 Read in English 🇬🇧

Selamat Datang di Hajriah Fajar: Hidup Sehat & Cerdas di Era Digital

Masih Pakai Windows 7? Beginilah SATUSEHAT Bisa Bocor dari Komputer Administrasi

Jadi begini. Di salah satu rumah sakit kabupaten, ada komputer administrasi yang udah lama nggak pernah dimatikan. Literally. Nggak pernah. Layarnya kadang nyala hijau, kadang muncul pop-up “Update failed” dari 2018. OS-nya? Windows 7, bajakan, lengkap dengan watermark “This copy of Windows is not genuine” di pojok kanan bawah.

Di komputer itu, ada aplikasi rekam medis lokal yang baru aja “terintegrasi” dengan SATUSEHAT. Keren kan? Katanya tinggal klik, data langsung sync ke server Kemenkes. Tapi ada satu hal kecil yang sering dilupakan: sistem lokalnya kayak kapal bocor yang diplester isolasi bening. Belum lagi antivirusnya udah mati, adminnya pakai password “admin123”, dan semua file disimpan di Desktop. Yes, termasuk file backup rekam medis bulan lalu.

Lucunya, semua orang tahu password-nya, tapi nggak ada yang berani ganti. Takut bikin sistem error. Padahal error-nya udah ada sebelum siapa pun lahir kayaknya.

Waktu itu pernah ada kejadian menarik. Seorang teknisi IT dari luar diminta bantu update sistem karena aplikasi SATUSEHAT error. Dia datang, colok flashdisk. Biasa aja. Tapi beberapa hari kemudian, ada aktivitas aneh di log integrasi. Ternyata flashdisk itu kena malware — dan malware-nya otomatis nyedot isi folder Desktop. Termasuk backup, file CSV, dan log data pasien.

Salah sistemnya? Enggak. Salah manusianya juga enggak sepenuhnya. Tapi yang jelas, ketika kita bangun rumah pintar tapi fondasinya masih pakai kayu lapuk, jangan heran kalau bocor di musim hujan.

Banyak yang lupa, SATUSEHAT itu bukan sulap. Ia cuma jembatan. Dan jembatan sebagus apa pun bisa roboh kalau sisi lain jembatannya dibangun di atas rawa.

Masalahnya bukan cuma teknis. Ini tentang budaya. Di mana security dianggap ribet, audit dianggap repot, dan SOP ditulis untuk dilanggar diam-diam.

Dan di tengah semua itu, ada pasien yang percaya datanya aman. Padahal di ruang sebelah, ada admin yang sedang main game Zuma pakai komputer yang sama.

💡 Sedikit Refleksi

Bukan cuma soal OS-nya jadul. Tapi soal mindset. Kalau kita masih nganggep update sistem itu cuma nambah ribet kerjaan, dan password cuma formalitas, ya siap-siap aja.

SATUSEHAT bisa bocor bukan karena Kemenkes lalai. Tapi karena kita semua masih kerja dengan asumsi “asal nyala, beres.”

Ada saatnya kita harus berhenti pakai alasan “ini rumah sakit daerah, fasilitas terbatas.” Karena hacker nggak peduli kamu dari kota mana. Yang mereka lihat cuma: “Wah, ini servernya bisa diakses tanpa login. Jackpot.”

✅ Tips Kecil (Tapi Penting)

• Ganti OS. Minimal pakai versi Windows yang masih didukung. Kalau bisa migrasi ke Linux, lebih bagus.
• Aktifkan audit trail di sistem integrasi. Biar ketahuan siapa klik apa dan kapan.
• Jangan share password antar shift. Setiap staf harus punya akses masing-masing.
• Backup terenkripsi. Jangan taruh file backup di desktop, apalagi tanpa password.
• Edukasi rutin buat staf. Nggak semua orang tahu kalau klik file dari email bisa fatal.

Kadang kita mikir: "Ah, cuma data puskesmas. Siapa yang mau nyolong?" Tapi kalau kamu lihat betapa mahalnya data kesehatan di dark web... mungkin kamu bakal mulai mikir dua kali sebelum pakai password "123456".

Dan buat kamu yang masih bilang, "Tapi sistem kita jalan kok," ya... semoga aja jalan terus. Sampai tiba-tiba enggak.

📚 Referensi dan Bacaan Lanjutan

• SATUSEHAT Playbook - Kemenkes RI

Welcome to Hajriah Fajar: Living Smart & Healthy in the Digital Age

Still Running Windows 7? Here’s How SATUSEHAT Can Leak from the Admin Desk

Somewhere in a district hospital, there's an admin PC that hasn’t been shut down in years. Literally. The screen flickers between green and "Update failed" pop-ups from 2018. The OS? Windows 7. Cracked version. Complete with “This copy of Windows is not genuine” watermark.

That PC runs the local EMR system, now proudly “integrated” with SATUSEHAT. Sounds fancy, right? Just one click, and data syncs to the national server. But here's what everyone forgot: the local system is held together with digital duct tape. Antivirus is dead, the admin password is “admin123”, and all backups live on the Desktop. I wish I was joking.

The kicker? Everyone knows the password — but no one dares to change it. Afraid it might crash the whole system. Even though it was already broken before anyone was born.

One time, an external technician was brought in to fix a bug in the SATUSEHAT connector. He plugged in a flash drive. No big deal. But days later, the integration logs showed suspicious activity. That flash drive had malware. It quietly scraped the Desktop folder — backups, CSV files, patient logs, all gone.

Was it the system’s fault? Not really. Was it the staff’s? Not entirely. But when you build a smart house on termite-infested wood, don’t be surprised if the roof leaks during a storm.

SATUSEHAT is not magic. It’s a bridge. And even the best bridge collapses if one side is built on a swamp.

The problem isn’t always technical. It’s cultural. Where security is seen as a nuisance, audits as a burden, and SOPs are written to be ignored.

Meanwhile, patients trust their data is safe. While in the next room, the admin is playing Solitaire on the same computer.

💡 A Little Reflection

It’s not just about the outdated OS. It’s about mindset. If we still treat updates as “annoying” and passwords as “formalities,” well… good luck.

SATUSEHAT leaks not because the government fails, but because many of us operate on “if it still works, don’t touch it.”

At some point, we must stop saying, “But this is just a rural hospital.” Hackers don’t care where you are. They only care that your server doesn’t require a login.

✅ Simple but Real Tips

• Upgrade the OS. At least use a supported version. If possible, move to Linux.
• Enable audit trails in your EMR integration. So you know who clicked what and when.
• Don’t share passwords between shifts. Everyone should have individual credentials.
• Encrypt your backups. And no, the Desktop is not a secure place.
• Train your staff regularly. Many still think clicking email attachments is harmless.

You might think: “It’s just a community clinic, who’d want our data?” But if you check the price of medical data on the dark web… you might change your mind.

And to those who still say, “But our system works just fine” — well… hopefully it keeps working. Until it doesn’t.

📚 Referensi dan Bacaan Lanjutan

• SATUSEHAT Playbook - Kemenkes RI