PhilJobNet, OVP and Air Force Named as Hackers Claim a Wave of Philippine Government Data Breaches on 5 November
PhilJobNet, the Office of the Vice President and the Philippine Air Force are among the agencies hackers claim to have breached on 5 November. None has been confirmed; the OVP disputes its case.
Hackers claimed data from Philippine government agencies and other institutions on 5 November, among them the job portal PhilJobNet, the Office of the Vice President (OVP) and the Philippine Air Force. The monitoring group Deep Web Konek logged seven alleged data breaches or leaks that day, PhilstarTech reports. None has been verified.
What the attackers claim
The biggest number comes from a group calling itself DeathNote Hackers. PhilstarTech says it claims about 19.2 million records linked to PhilJobNet, a portal run by the labour department's Bureau of Local Employment, plus about 10 gigabytes of documents from the OVP's scheduling platform.
The Air Force appears twice. One posting claims about 11 gigabytes from its Command Clearance System, copies of government-issued IDs among them, and another about 6 GB of personnel and administrative records from its HR system.
Another group says it gathered about eight gigabytes from the Presidential Commission on Good Government, and a third poster claims records of more than 81,000 students at Nueva Ecija University of Science and Technology. PhilstarTech also reports that the Philippine Nurses Association's website was defaced and that the science department's site was inaccessible for several hours, cause unknown.
Bilyonaryo News Channel (BNC) adds one more. An unnamed source told it that attackers got into DocTracks, the internal document-management system of the Department of Information and Communications Technology (DICT), though BNC hasn't established how deep that access went or whether the incidents it lists are linked.
The OVP's response
BNC says it now holds OVP briefs on the Vice President's meetings with foreign ambassadors, some marked confidential. The OVP's statement says the platform "was not a government website" and carried no classified information, and that the timing raises concerns of "a broader politically motivated effort to discredit the Vice President".
The OVP's statement doesn't say where BNC's briefs came from.
Who hasn't spoken
Neither PhilstarTech nor BNC carries a response from the DICT, the labour department, the Air Force, the Cybercrime Investigation and Coordinating Center or the National Privacy Commission, or any advice for PhilJobNet users.
More news
Thai Police Break Up Ring Supplying Company Mule Accounts to Call-Centre Scammers, Losses Over 250 Million Baht
Thai police have broken up a ring that supplied company bank accounts to call-centre scam gangs, with warrants for 56 people and losses of more than 250 million baht across at least 130 cases.
CERT-In Warns Banks and Fintechs of Crafty Falcon, an AI-Assisted Campaign Draining Funds Through Their Own Payment APIs
CERT-In warns Indian banks, NBFCs, fintechs and crypto exchanges that the Crafty Falcon campaign is using AI attack tools and their own payment APIs to move money out.
Cyberattack Hits French Blood Bank Freezers at Three EFS Sites as Fridge Hacks Spread Across Europe
Cyberattack on French blood banks: settings on cold rooms holding plasma at three EFS sites were pushed to very high temperatures. No products were lost, the blood service says.