NPC confirms data breach in 10 government agencies

The Philippine National Privacy Commission is investigating data breach notifications from at least 10 government agencies. The commission emphasized that while reporting is mandatory, agencies remain legally responsible for protecting citizen data and addressing security vulnerabilities.
Why it matters
This incident underscores the critical cybersecurity challenges facing government institutions and the importance of strict data privacy compliance in the public sector.
MANILA, Philippines - National Privacy Commission (NPC) is evaluating data breach notifications filed by at least 10 major government agencies and institutions following a series of cybersecurity incidents.
The privacy watchdog has confirmed receiving notifications on Tuesday from key national government agencies including the Department of Information and Communications Technology (DICT), Presidential Commission on Good Government, Department of Labor and Employment's Bureau of Local Employment, Bureau of Internal Revenue (BIR) and the Philippine Amusement and Gaming Corp.
Also submitting breach notifications were the Department of Justice Office for Alternative Dispute Resolution, Securities and Exchange Commission, Philippine Coast Guard, Department of Trade and Industry and the Department of Science and Technology-Philippine Institute of Volcanology and Seismology.
Jose Belarmino II, NPC deputy privacy commissioner and spokesman, explained that under NPC Circular No. 16-03, filing breach notifications is a mandatory regulatory step, but stressed that reporting alone does not absolve agencies of liability.
Also covering this story
One other newsroom covered this event. We read that version too.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in