Senators bat for better cybersecurity measures after PhilHealth ransomware attack


Senators have called on government agencies to provide stronger cybersecurity measures to prevent attacks such as what happened to the Philippine Health Insurance Corporation (PhilHealth).

Sen. Grace Poe said that any cyber attack is unacceptable, especially against government data systems.

"As keepers of vital information of the people, the government must institute the most secure firewall against cybercrime," she added.

The senator stated that they are currently awaiting the final report of PhilHealth to guarantee that members' records are not compromised.

She urged the Department of Department Of Information And Communications Technology (DICT) and relevant agencies to conduct regular checks on the integrity of the security systems of government departments to ensure they are protected against hackers.

On the other hand, Sen. Christopher "Bong" Go has reiterated his call for the PhilHealth as well as other government agencies to bolster its cybersecurity defenses amid the recent ransomware attack that led to the exposure of sensitive data.

Go said the protection of data and the continuity of services, especially for the underprivileged, should be of utmost priority.

"Unang-una, hindi tayo pwedeng maging kampante. Ang bawat detalye ng impormasyon ay mahalaga, at ang bawat segundo ng pagka-antala sa serbisyo ay maaaring magdulot ng malaking problema sa ating mga kababayan na nangangailangan (First of all, we cannot be lax. Every detail and information is important, and every second that services are delayed can cause a big problem for our citizens who need it),” Go stated.

Go, chairperson of the Committee on Health, urged PhilHealth to take immediate and stringent measures.

"Dapat ay mayroon tayong preventive measures na hindi na maulit ang ganitong insidente. Kailangan nating palakasin ang ating cybersecurity defenses (We should have preventive measures so incidents like this will not repeat. WE need to enhance our cybersecurity defenses)," he added.

The senator also stressed the importance of ensuring that PhilHealth's services remain uninterrupted, especially for the poor.

According to reports, the hackers exposed PhilHealth employees' identification cards, payroll details, and other sensitive information. The ransomware attack, which used Medusa ransomware, demanded a ransom of $300,000 or approximately P17 million from the agency.

PhilHealth confirmed that user data, including names, addresses, and identification numbers, were compromised.

DICT and the National Privacy Commission are still determining the extent of the compromised data. Go called for proper support to mitigate the risks of identity theft and further cyberattacks.

As the investigation continues, Go remains steadfast in his call for strengthened cybersecurity measures and uninterrupted services, particularly for the marginalized sectors of society.

"Ang cybersecurity ay hindi lamang responsibilidad ng PhilHealth o ng gobyerno. Ito ay responsibilidad nating lahat. Kailangan ng kooperasyon mula sa bawat isa para masiguro ang ligtas na paggamit ng digital platforms (Cybersecurity is not just PhilHealth's problem or the government. This is everyone's responsibility. We need everyone's cooperation to ensure safe use of digital platforms)," Go added.