Sunday, May 27, 2018
Close  
  • share this

NPC starts probe of alleged data breach after website attacks

/ 09:51 AM April 24, 2018

The National Privacy Commission (NPC) has begun its investigation into the reported data breach of at least 2,000 individuals following an organized attack on the websites of government and commercial organizations last April 1.

In a statement on Tuesday, the NPC said data affected by the breach included the subjects’ sensitive personal information such as names, addresses, phone numbers, email addresses, and in some instances, even passwords and school details.

According to NPC, information such as these, could be used to perpetuate identity fraud; could land in the hands of unauthorized persons; and could cause serious harm to the affected data subjects.

ADVERTISEMENT

Summoned on Monday by the NPC were top officials of the Taguig City University, the Department of Education (DepEd) offices in Bacoor City and Calamba City, the province of Bulacan, Philippine Carabao Center, Republic Central Colleges in Angeles City and the Laguna State Polytechnic University.

Those summoned were made to explain why within 72 hours of the breach, they did not notify the NPC and the affected data subjects, whose personal data were exposed for download via links posted on Facebook.

As of Monday, the NPC said none of the affected organizations were able to issue any data breach notifications, which is part of their obligations as Personal Information Controllers (PICs) under the Data Privacy Act of 2012.

“PICs are required to employ organizational, technical, and physical measures to protect personal data,” Privacy Commissioner Raymund Enriquez Liboro said.

“This includes the duty to inform data subjects and this Commission if there is a serious data breach,” he added.       /muf

Don't miss out on the latest news and information.
View comments

Subscribe to INQUIRER PLUS to get access to The Philippine Daily Inquirer & other 70+ titles, share up to 5 gadgets, listen to the news, download as early as 4am & share articles on social media. Call 896 6000.

TAGS: attack, data breach, National Privacy Commission, Websites
For feedback, complaints, or inquiries, contact us.


© Copyright 1997-2018 INQUIRER.net | All Rights Reserved

We use cookies to ensure you get the best experience on our website. By continuing, you are agreeing to our use of cookies. To find out more, please click this link.