Follow us on Google News
Cyberattacks in the Philippines exposed more than 85.9 million records during the third quarter of 2026, according to a cybersecurity report. Government agencies, financial institutions and online lending platforms were among the affected sectors, raising concerns over the security of sensitive personal information.
The report documented 83 data breach incidents between July and September, compared with 76 during the corresponding period last year.
How Did Hackers Expose 85.9 Million Records?
The findings revealed that July accounted for the largest concentration of reported breaches, with 47 incidents exposing approximately 60.2 million records. Additional incidents were identified during August and September, bringing the quarterly total above 85.9 million.
Although the figures were lower than those recorded in the second quarter, cybersecurity researchers cautioned that the decline did not necessarily indicate an improvement in digital security. Attackers were increasingly concentrating on larger datasets and seeking direct access to corporate networks rather than relying solely on individual accounts.
The report also identified attempts to sell privileged administrative credentials, virtual private network access and Active Directory login details. Such credentials can provide unauthorised users with access to internal systems and potentially sensitive information.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Across the first nine months of 2026, researchers recorded 338 cybersecurity incidents involving more than 421 million exposed records, indicating the scale of the country’s continuing data security challenges.
Which Organisations and Personal Records Were Targeted?
Government institutions remained among the principal targets, with at least 10 state agencies reportedly affected by data breaches. Financial services, including banks, investment companies and online lending platforms, also featured prominently in the findings.
One incident involving an unidentified government agency reportedly exposed 103.2 GB of information, including more than 140,000 scanned passports and identification documents. Other exposed material included overseas employment records, financial information, user accounts and legal case files.
A separate incident involving the transportation sector reportedly compromised approximately 16 million records, representing 7.7 GB of data. Researchers could not establish whether the affected organisation was government-owned or privately operated.
Online lending platforms were also linked to incidents exposing around 32 million records. Additionally, the report identified at least nine million compromised login credentials, including usernames and passwords, which could potentially be misused to access affected accounts.
What Action Are Authorities Taking?
The Philippine government has assured citizens that it is prepared to respond to cyberattacks following reports of breaches involving public institutions.
Government spokesperson Claire Castro said authorities had previously taken action against attacks targeting official websites. President Ferdinand Marcos Jr. had also been informed about the reported data leaks.
Meanwhile, the country’s Cybercrime Investigation and Coordinating Center indicated that some recently circulated datasets appeared to contain information obtained during earlier breaches rather than fresh intrusions. Officials said recycled information was being presented online as newly stolen government data, complicating efforts to establish the extent of recent attacks.
Investigators are working with the National Bureau of Investigation to identify individuals operating behind online aliases, including a group calling itself the Three Musketeers, which allegedly claimed responsibility for targeting the Bureau of Internal Revenue.
The findings highlight continuing risks to government databases and financial systems, particularly when stolen credentials and previously exposed information remain available for criminal misuse. Distinguishing fresh breaches from recycled datasets will also remain important as authorities investigate the reported incidents.
Click Here For The Original Source.
——————————————————–
