ADVERTISEMENT

NBI says ex-employee who allegedly breached Smartmatic data had outside help

Published Apr 19, 2022 02:45 pm

The National Bureau of investigation (NBI) is convinced that the former contractual employee did not act alone in the alleged data breaching of a technology firm, Smartmatic, a software provider on contract with the Commission on Elections (Comelec).

NBI Cybercrime Division Chief Victor Lorenzo presents the bureau’s findings into the alleged security breach involving Smartmatic’s servers during the third hearing of the Committee on Electoral Reforms and People’s Participation on election-related issues Tuesday, April 19, 2022. (Photo: Senate PRIB)

In today’s hybrid public hearing by the Senate electoral reforms and people’s participation committee chaired by Senator Imee Marcos, lawyer Victor Lorenzo, head of the NBI cybercrime division, said he is convinced that the former employee, Ricardo Argana, did not act alone as he was not fluent in English based on the communications they have recovered.

It was impossible for one man to have committed 726 log ins or entering a data server of Smartmatic in just six days, he explained.

During the hearing, the NBI showed the timelines of their investigation on the alleged data breach of Smartmatic.

In their presentation, Lorenzo said Argana is facing an administrative inquiry by Smartmatic.

Aside from a criminal charge the NBI would file against Argana, Smartmatic officials they are considering filing damage suits against their former employee.

Argana reportedly admitted that somebody offered him free training modules in exchange for a line connection to a third party with Smartmatic but did not know the third person because he was just contacted by Facebook Messenger.

When prodded by NBI, Argana said he was promised from P50,000 to P300,000 by the third person.

Argana, according to the NBI, has been accused of illegal access and data interference before the Taguig city fiscal’s office.

He was reportedly hired by Smartmatic in August, 2021 as a quality assurance staff and was detailed that a Comelec warehouse in November, 2021 to test the Automated Election System (AES).

In December, 2021 until last January 2, Smartmatic noticed an unusual traffic and the download of its computer system which was later traced to Argana who was found to have brought home a company-issued laptop.

The NBI also said that there are other persons of interest based on the Facebook posts of SXOX Group.

The explained that they saw a pattern of hacking at Smartmatic and a hacking of Comelec server in 2016 described as ‘’Comeleak’’, and the so-called Ilo Ilo Blackhat which saw the hacking of the city government and hospital databases in Iloilo in2018.

Related Tags

poll fraud NBI May 2022 elections Comelec automated election system (AES) smartmatic
ADVERTISEMENT
.most-popular .layout-ratio{ padding-bottom: 79.13%; } @media (min-width: 768px) and (max-width: 1024px) { .widget-title { font-size: 15px !important; } }

{{ articles_filter_1561_widget.title }}

.most-popular .layout-ratio{ padding-bottom: 79.13%; } @media (min-width: 768px) and (max-width: 1024px) { .widget-title { font-size: 15px !important; } }

{{ articles_filter_1562_widget.title }}

.most-popular .layout-ratio{ padding-bottom: 79.13%; } @media (min-width: 768px) and (max-width: 1024px) { .widget-title { font-size: 15px !important; } }

{{ articles_filter_1563_widget.title }}

{{ articles_filter_1564_widget.title }}

.mb-article-details { position: relative; } .mb-article-details .article-body-preview, .mb-article-details .article-body-summary{ font-size: 17px; line-height: 30px; font-family: "Libre Caslon Text", serif; color: #000; } .mb-article-details .article-body-preview iframe , .mb-article-details .article-body-summary iframe{ width: 100%; margin: auto; } .read-more-background { background: linear-gradient(180deg, color(display-p3 1.000 1.000 1.000 / 0) 13.75%, color(display-p3 1.000 1.000 1.000 / 0.8) 30.79%, color(display-p3 1.000 1.000 1.000) 72.5%); position: absolute; height: 200px; width: 100%; bottom: 0; display: flex; justify-content: center; align-items: center; padding: 0; } .read-more-background a{ color: #000; } .read-more-btn { padding: 17px 45px; font-family: Inter; font-weight: 700; font-size: 18px; line-height: 16px; text-align: center; vertical-align: middle; border: 1px solid black; background-color: white; } .hidden { display: none; }
function initializeAllSwipers() { // Get all hidden inputs with cms_article_id document.querySelectorAll('[id^="cms_article_id_"]').forEach(function (input) { const cmsArticleId = input.value; const articleSelector = '#article-' + cmsArticleId + ' .body_images'; const swiperElement = document.querySelector(articleSelector); if (swiperElement && !swiperElement.classList.contains('swiper-initialized')) { new Swiper(articleSelector, { loop: true, pagination: false, navigation: { nextEl: '#article-' + cmsArticleId + ' .swiper-button-next', prevEl: '#article-' + cmsArticleId + ' .swiper-button-prev', }, }); } }); } setTimeout(initializeAllSwipers, 3000); const intersectionObserver = new IntersectionObserver( (entries) => { entries.forEach((entry) => { if (entry.isIntersecting) { const newUrl = entry.target.getAttribute("data-url"); if (newUrl) { history.pushState(null, null, newUrl); let article = entry.target; // Extract metadata const author = article.querySelector('.author-section').textContent.replace('By', '').trim(); const section = article.querySelector('.section-info ').textContent.replace(' ', ' '); const title = article.querySelector('.article-title h1').textContent; // Parse URL for Chartbeat path format const parsedUrl = new URL(newUrl, window.location.origin); const cleanUrl = parsedUrl.host + parsedUrl.pathname; // Update Chartbeat configuration if (typeof window._sf_async_config !== 'undefined') { window._sf_async_config.path = cleanUrl; window._sf_async_config.sections = section; window._sf_async_config.authors = author; } // Track virtual page view with Chartbeat if (typeof pSUPERFLY !== 'undefined' && typeof pSUPERFLY.virtualPage === 'function') { try { pSUPERFLY.virtualPage({ path: cleanUrl, title: title, sections: section, authors: author }); } catch (error) { console.error('ping error', error); } } // Optional: Update document title if (title && title !== document.title) { document.title = title; } } } }); }, { threshold: 0.1 } ); function showArticleBody(button) { const article = button.closest("article"); const summary = article.querySelector(".article-body-summary"); const body = article.querySelector(".article-body-preview"); const readMoreSection = article.querySelector(".read-more-background"); // Hide summary and read-more section summary.style.display = "none"; readMoreSection.style.display = "none"; // Show the full article body body.classList.remove("hidden"); } document.addEventListener("DOMContentLoaded", () => { let loadCount = 0; // Track how many times articles are loaded const offset = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]; // Offset values const currentUrl = window.location.pathname.substring(1); let isLoading = false; // Prevent multiple calls if (!currentUrl) { console.log("Current URL is invalid."); return; } const sentinel = document.getElementById("load-more-sentinel"); if (!sentinel) { console.log("Sentinel element not found."); return; } function isSentinelVisible() { const rect = sentinel.getBoundingClientRect(); return ( rect.top < window.innerHeight && rect.bottom >= 0 ); } function onScroll() { if (isLoading) return; if (isSentinelVisible()) { if (loadCount >= offset.length) { console.log("Maximum load attempts reached."); window.removeEventListener("scroll", onScroll); return; } isLoading = true; const currentOffset = offset[loadCount]; window.loadMoreItems().then(() => { let article = document.querySelector('#widget_1690 > div:nth-last-of-type(2) article'); intersectionObserver.observe(article) loadCount++; }).catch(error => { console.error("Error loading more items:", error); }).finally(() => { isLoading = false; }); } } window.addEventListener("scroll", onScroll); });

Sign up by email to receive news.