ADVERTISEMENT

Downloading compromised data may pose serious consequences, NPC warns

Published Oct 13, 2023 07:14 am

At A Glance

  • Anyone who downloaded these files may be held liable for "unauthorized processing," with severe penalties, including imprisonment and fines in millions.
  • He confirmed that the Philippine Statistics Authority (PSA) has filed a personal data breach notification.
  • He assured the public that the NPC is actively investigating the data breach involving PhilHealth.

The National Privacy Commission (NPC) issued a public warning on Friday, Oct. 13, about the risks of downloading hacked data files from the Philippine Health Insurance Corporation (PhilHealth) ransomware attack.

viber_image_2023-10-13_15-00-56-217.png
NPC-Complaints and Investigation Division Chief Michael R. Santo in PTV's Bagong Pilipinas Ngayon. (Screenshot from PTV/YouTube)

"The National Privacy Commission reminds everyone not to download the data leaked by the ransomware group out of mere curiosity," NPC-Complaints and Investigation Division Chief Michael R. Santos said in a mix of English and Filipino in PTV's Bagong Pilipinas Ngayon.

Santos emphasized that anyone who downloaded these files may be held liable for "unauthorized processing," with severe penalties, including imprisonment and fines in millions.

READ:

https://mb.com.ph/2023/10/9/dict-warns-against-opening-files-from-phil-health-ransomware-attack

PSA data breach

Meanwhile, he confirmed that the Philippine Statistics Authority (PSA) has filed a "personal data breach notification."

READ:

https://mb.com.ph/2023/10/12/hacker-behind-psa-data-leak-different-from-phil-health-ransomware-group-dict

"This is just the initial step. We will be requiring them to submit a more comprehensive report, providing details on which data were involved and the nature of the breach," he said.

"At this point, we are conducting an investigation and verifying all the information that has been reported to us," he added.

RELATED STORY:

https://mb.com.ph/2023/10/11/psa-probes-data-leak-national-id-civil-registry-unaffected-1

Breached personal information risks

Santos noted that the breached personal information can be used for identity theft and in different kinds of scams—email, text, or call scams.

"There are many types of phishing and smishing," Santos said.

"You might receive a message, text, or call that appears to be from someone you know, but it's not, with the intention of gathering more information, possibly personal information like OTPs (one true pairing) or PINs (personal identification number), to affect your e-wallets and online banking," he added.

Furthermore, he reminded the public that if they encounter related incidents, they can report them to the NPC using the phone numbers and email addresses available on its website.

Santos also encouraged public and private institutions to ensure the safety of the public's personal information, emphasizing the importance of not only cybersecurity measures but also physical security.

"Physical security measures like locks, cabinets, and other security measures are important because not all personal information is stored on computers; there are still paper-based records that need protection," he said.

Still under investigation

Furthermore, he assured the public that the NPC is actively investigating the data breach involving PhilHealth.

"The investigation is ongoing, and we will continue to examine and determine the security gaps that led to this breach," he said.

"We will also determine the accountability of PhilHealth and responsible officers, as well as the hackers, especially in relation to our Data Privacy Act," he added.

Related Tags

Philippine Statistics Authority PhilHealth NPC
ADVERTISEMENT
.most-popular .layout-ratio{ padding-bottom: 79.13%; } @media (min-width: 768px) and (max-width: 1024px) { .widget-title { font-size: 15px !important; } }

{{ articles_filter_1561_widget.title }}

.most-popular .layout-ratio{ padding-bottom: 79.13%; } @media (min-width: 768px) and (max-width: 1024px) { .widget-title { font-size: 15px !important; } }

{{ articles_filter_1562_widget.title }}

.most-popular .layout-ratio{ padding-bottom: 79.13%; } @media (min-width: 768px) and (max-width: 1024px) { .widget-title { font-size: 15px !important; } }

{{ articles_filter_1563_widget.title }}

{{ articles_filter_1564_widget.title }}

.mb-article-details { position: relative; } .mb-article-details .article-body-preview, .mb-article-details .article-body-summary{ font-size: 17px; line-height: 30px; font-family: "Libre Caslon Text", serif; color: #000; } .mb-article-details .article-body-preview iframe , .mb-article-details .article-body-summary iframe{ width: 100%; margin: auto; } .read-more-background { background: linear-gradient(180deg, color(display-p3 1.000 1.000 1.000 / 0) 13.75%, color(display-p3 1.000 1.000 1.000 / 0.8) 30.79%, color(display-p3 1.000 1.000 1.000) 72.5%); position: absolute; height: 200px; width: 100%; bottom: 0; display: flex; justify-content: center; align-items: center; padding: 0; } .read-more-background a{ color: #000; } .read-more-btn { padding: 17px 45px; font-family: Inter; font-weight: 700; font-size: 18px; line-height: 16px; text-align: center; vertical-align: middle; border: 1px solid black; background-color: white; } .hidden { display: none; }
function initializeAllSwipers() { // Get all hidden inputs with cms_article_id document.querySelectorAll('[id^="cms_article_id_"]').forEach(function (input) { const cmsArticleId = input.value; const articleSelector = '#article-' + cmsArticleId + ' .body_images'; const swiperElement = document.querySelector(articleSelector); if (swiperElement && !swiperElement.classList.contains('swiper-initialized')) { new Swiper(articleSelector, { loop: true, pagination: false, navigation: { nextEl: '#article-' + cmsArticleId + ' .swiper-button-next', prevEl: '#article-' + cmsArticleId + ' .swiper-button-prev', }, }); } }); } setTimeout(initializeAllSwipers, 3000); const intersectionObserver = new IntersectionObserver( (entries) => { entries.forEach((entry) => { if (entry.isIntersecting) { const newUrl = entry.target.getAttribute("data-url"); if (newUrl) { history.pushState(null, null, newUrl); let article = entry.target; // Extract metadata const author = article.querySelector('.author-section').textContent.replace('By', '').trim(); const section = article.querySelector('.section-info ').textContent.replace(' ', ' '); const title = article.querySelector('.article-title h1').textContent; // Parse URL for Chartbeat path format const parsedUrl = new URL(newUrl, window.location.origin); const cleanUrl = parsedUrl.host + parsedUrl.pathname; // Update Chartbeat configuration if (typeof window._sf_async_config !== 'undefined') { window._sf_async_config.path = cleanUrl; window._sf_async_config.sections = section; window._sf_async_config.authors = author; } // Track virtual page view with Chartbeat if (typeof pSUPERFLY !== 'undefined' && typeof pSUPERFLY.virtualPage === 'function') { try { pSUPERFLY.virtualPage({ path: cleanUrl, title: title, sections: section, authors: author }); } catch (error) { console.error('ping error', error); } } // Optional: Update document title if (title && title !== document.title) { document.title = title; } } } }); }, { threshold: 0.1 } ); function showArticleBody(button) { const article = button.closest("article"); const summary = article.querySelector(".article-body-summary"); const body = article.querySelector(".article-body-preview"); const readMoreSection = article.querySelector(".read-more-background"); // Hide summary and read-more section summary.style.display = "none"; readMoreSection.style.display = "none"; // Show the full article body body.classList.remove("hidden"); } document.addEventListener("DOMContentLoaded", () => { let loadCount = 0; // Track how many times articles are loaded const offset = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]; // Offset values const currentUrl = window.location.pathname.substring(1); let isLoading = false; // Prevent multiple calls if (!currentUrl) { console.log("Current URL is invalid."); return; } const sentinel = document.getElementById("load-more-sentinel"); if (!sentinel) { console.log("Sentinel element not found."); return; } function isSentinelVisible() { const rect = sentinel.getBoundingClientRect(); return ( rect.top < window.innerHeight && rect.bottom >= 0 ); } function onScroll() { if (isLoading) return; if (isSentinelVisible()) { if (loadCount >= offset.length) { console.log("Maximum load attempts reached."); window.removeEventListener("scroll", onScroll); return; } isLoading = true; const currentOffset = offset[loadCount]; window.loadMoreItems().then(() => { let article = document.querySelector('#widget_1690 > div:nth-last-of-type(2) article'); intersectionObserver.observe(article) loadCount++; }).catch(error => { console.error("Error loading more items:", error); }).finally(() => { isLoading = false; }); } } window.addEventListener("scroll", onScroll); });

Sign up by email to receive news.