Indonesia is investigating a suspected security flaw in a Covid-19 test-and-trace app that left exposed personal information and the health status of 1.3 million people, a health ministry official has said.

Researchers from encryption provider vpnMentor said personal information in the Indonesia Health Alert Card app, often required to be used by travellers, was accessible "due to the lack of protocols put in place by the app's developers."

Anas Ma'ruf, a health ministry official overseeing data, said the government was looking into the potential breach, but the potential flaw was in an earlier version of the app, which has not been used since July.

Read more from Reuters here.