DICT expresses 'grave concern' on alleged personal data leak; says probe is underway
The Department of Information and Communications Technology (DICT) reiterated its commitment to strengthening its investigation amid reports of an alleged personal data leak.
(DICT / MANILA BULLETIN)
“The DICT considers the incident as a grave concern that threatened the confidentiality, integrity, and privacy of user data,” DICT said in a statement on Thursday, April 20. DICT said that the Philippine National Computer Emergency Response Team (NCERT) of the DICT Cybersecurity Bureau is prioritizing the investigation on the matter. “The NCERT started its investigation on the alleged breach after receiving links to an Azure blob storage containing sample photos of IDs, including PNP and National Bureau of Investigation (NBI) clearances, from a security researcher last 22 February 2023,” DICT said. DICT added that the security researcher “did not disclose to NCERT the source of the data and what information asset was compromised.” Furthermore, DICT noted that the information sent by the security researcher is “identical” to what was reported by Jeremiah Fowler and which has since been credited by recent news reports. DICT said that the NCERT also provided an incident report regarding the alleged breach to both the PNP and the NBI between 3 to 23 March 2023. Amid these reports, DICT assured the public that an investigation on the “matter is underway.” DICT, on the other hand, also reminded all government agencies to “increase its cybersecurity measures” and to coordinate with the DICT for further capacity building in this area. “Cybersecurity should be a concerted effort of everyone and all agencies are encouraged to seek assistance to help secure their respective cyber assets,” DICT added.
(DICT / MANILA BULLETIN)
“The DICT considers the incident as a grave concern that threatened the confidentiality, integrity, and privacy of user data,” DICT said in a statement on Thursday, April 20. DICT said that the Philippine National Computer Emergency Response Team (NCERT) of the DICT Cybersecurity Bureau is prioritizing the investigation on the matter. “The NCERT started its investigation on the alleged breach after receiving links to an Azure blob storage containing sample photos of IDs, including PNP and National Bureau of Investigation (NBI) clearances, from a security researcher last 22 February 2023,” DICT said. DICT added that the security researcher “did not disclose to NCERT the source of the data and what information asset was compromised.” Furthermore, DICT noted that the information sent by the security researcher is “identical” to what was reported by Jeremiah Fowler and which has since been credited by recent news reports. DICT said that the NCERT also provided an incident report regarding the alleged breach to both the PNP and the NBI between 3 to 23 March 2023. Amid these reports, DICT assured the public that an investigation on the “matter is underway.” DICT, on the other hand, also reminded all government agencies to “increase its cybersecurity measures” and to coordinate with the DICT for further capacity building in this area. “Cybersecurity should be a concerted effort of everyone and all agencies are encouraged to seek assistance to help secure their respective cyber assets,” DICT added.