Press "Enter" to skip to content

Posts tagged as “National Privacy Commission”

NPC launches “Na-leak ba ang PhilHealth Data ko?” Portal

October 14, 2023

In the wake of the PhilHealth Hacking, Philippines’ National Privacy Commission (NPC) launches the “Na-leak ba ang PhilHealth Data ko? Portal. The “Na-leak ba ang PhilHealth Data ko? Portal is a tool to check if your personal data is included in the PhilHealth cyberattack last Sept 22.

NPC explained that “Na-leak ba ang PhilHealth Data ko? Portal is a “simplified database search portal designed to help individuals verify the status of their personal information in light of the recent incident involving the Philippine Health Insurance Corporation (PhilHealth) database, purportedly exfiltrated by the Medusa Ransomware Group, and posted online on October 5, 2023. As of October 13, 2023, the initial batch of data available on the portal pertains to individuals aged 60 years and above, containing an estimated 1 million records out of 8.5 million senior citizens.”

To access the “Na-leak ba ang PhilHealth Data ko? database search tool, visit: https://philhealthleak.privacy.gov.ph, then just provide your PhilHealth Identification Number (PIN) to know if you are part of the leaked database.

PhilHealth issue another “Urgent Notice to the Public” in connection to the Cyberattack last Sept 22.

October 3, 2023

PhilHealth has once again release an announcement that they are calling “Urgent Notice to the Public,” this is in connection to the Cyberattack that was made last Sept 22. The health agency reiterates that no member information have been taken and that membership database is intact and unharmed by the cyberattack last Sept 22.

They later reminded the public to be cautious in opening malicious contents online and on social media, which I suppose, is directed to PhilHealth’s employees. The agency is also working with the authorities to catch the perpetrators.

PhilHealth is currently working with multiple agencies that includes Department of Communication Technology (DICT), National Privacy Commission (NPC), Philippine National Police Cybercrime Division, Cybercrime Investigation and Coordinating Center (CICC) and the National Bureau of Investigation(NBI) to identify the perpetrators of the hacking.

Here’s the announcement by PhilHealth:

PhilHealth previously posted a Urgent Notice to the Public explaining what information have been compromised in the cyberattack that happened last Sept 22. Below are compromised PhilHealth member’s information;

  • Name
  • Address
  • Date of Birth
  • Sex
  • Phone number
  • PhilHealth ID number

The Health agency also recommended a number of steps that affected PhilHealth Members can take as a precaution.

The hackers demanded a ransom of $300,000 or approximately P17 million as payment to decrypt the files but according to a report by CNN Philippines, “The DICT confirms that some PhilHealth data affected in the Medusa ransomware attack have been published in the dark web after the deadline to pay ransom money to hackers lapsed.”