Philippines SEC confirms data breach as BIR investigates 340K-record leak claims

All about the Philippine SEC breach

In a press release dated 9 November, the SEC said it detected the security incident on 6 November and concluded that personal information associated with individual accounts may have been exposed.

The information includes names, usernames, contact details, dates of birth, residential addresses and taxpayer identification numbers. The agency also clarified that its company records, internal databases and passwords were unaffected.

The Commission further added,

Additional technical safeguards and monitoring rules across the Commission’s digital infrastructure have likewise been implemented to prevent potential vulnerabilities and recurrence.

The SEC has added technical safeguards and monitoring rules to prevent a recurrence. It also advised the public to follow six precautionary steps to remain vigilant. These include,

BIR joins the crackdown

Separately, the Bureau of Internal Revenue (BIR) is investigating claims that approximately 340,000 lines of taxpayer information were being offered for sale online. The SEC faced a similar allegation involving 487,000 lines of information.

These figures refer to advertised records, not confirmed victims. Because both claims came from the same account, neither independently corroborates the other.

This came as Brazilian crypto exchange Mercado Bitcoin suspended deposits and withdrawals on 2 November after detecting a security incident in one of its systems. It followed a series of crypto security concerns, including Binance’s reported $6.3 billion exploit.

Final Summary

• The SEC concluded that the personal information linked to individual accounts may have been exposed.
• BIR is separately investigating claims that approximately 340,000 lines of taxpayer information were being offered for sale online.

Source: ambcrypto.com. Adapted by NBTC.