Indonesia is investigating a suspected security flaw in a Covid-19 test-and-trace app that left exposed personal information and the health status of 1.3 million people, a health ministry official said on Tuesday.

Researchers from encryption provider vpnMentor said personal information in the Indonesia Health Alert Card (eHAC) app, often required to be used by travellers, was accessible "due to the lack of protocols put in place by the app's developers".

Anas Ma'ruf, a health ministry official overseeing data, said the government...