MANILA – Philippine authorities are investigating a potential data breach involving a government cybersecurity accreditation program that may have exposed hundreds of corporate files.
On its official Facebook page, the Department of Information and Communications Technology (DICT) said its National Computer Emergency Response Team (NCERT) was responding to a report of a "possible data exposure involving a DICT Trusted Assessment Provider (DTAP)."
Initial information indicates that approximately 410 files linked to 48 companies participating in the DTAP program may have been exposed, comprising around 600 megabytes of data, or 770 megabytes uncompressed, the agency said.
According to the DICT, the compromised files "may include corporate registration records, permits, certifications, cybersecurity credentials, employment documents, and DICT performance evaluations."
Cybersecurity officials are currently verifying the authenticity, source, and scope of the exposure while coordinating with the affected provider to establish the facts, the agency added.
"Should the investigation confirm that personal or other protected data has been compromised, DICT will take appropriate action, including notifying affected parties as applicable and in accordance with the Data Privacy Act of 2012," the department said in a statement.
The DICT said the incident is being "actively managed" and urged media and the public to "exercise appropriate caution in sharing or reporting unverified information while the investigation is ongoing."
IT advocacy group BetterGovPH and cybersecurity monitor Deep Web Konek also reported earlier that a hacker going by the name core849 is claiming to have leaked 410 files linked to 48 companies.
The affected firms are allegedly part of the DICT's program that checks and approves cybersecurity firms before government agencies can hire them.
"The files reportedly include company papers, permits, certificates, and DICT's own notes on how each company was reviewed. The leaked files are said to be about 600 MB, growing to around 770 MB once opened up," the two groups posted on their official Facebook page.