PNP starts probe into its online recruitment platform over alleged data leak
The Philippine National Police (PNP) is now reviewing and assessing its online recruitment application portal amid reports that it became the gateway on the leaks of the police-related data.
PNP chief information officer Col. Redrico Maranan said both the Directorate for Information and Communication Technology (DICTM) and the Anti-Cybercrime Group (ACG) are now conducting assessment to determine if there was an indeed leak of personal information of its personnel as reported by cybersecurity researcher Jeremiah Fowler.
“The Anti-Cybercrime Group of the PNP is currently exerting efforts in fast-tracking its internal investigation to determine if there are possible violations of provisions of Republic Act 10173 (Data Privacy Act of 2012),” said Maranan in a statement.
“Likewise, the Directorate for Information and Communication Technology is currently conducting an assessment of the systems to determine possible violations or lapses in protocols and procedures,” he added.
In his article, Fowler said over 1.2 million records of employees and applicants with images and documents that include birth certificates, transcript of records, passports and other important documents were exposed.
He said the data include that of the PNP and the National Bureau of Investigation.
But despite the ongoing investigation, the PNP said there was no hacking incident that occurred.
“The PNP reiterates the statement of DICT Secretary John E. Uy that there was no hacking incident, intrusion, or breach on the PNP database and that it is actively coordinating with the said office for parallel investigation,” said Maranan.
“We assure the public that we are closely collaborating with DICT to ensure the security, safety, and privacy of information in the custody of the PNP to strictly comply with the provisions of the Data Privacy Act.,” he added.