PhilHealth, issued an urgent notice disclosing a cyberattack on their online system that compromised some of their members' personal data on October 2, 2023, Monday.
According to their announcement, the company encountered a data breach on September 22, 2023. A week later, PhilHealth assured that their primary database is still "intact and not infected."
The organization still did not have conclusive information with regard to the total number of affected members' data.
However, the health insurance company disclosed that the following relevant data were believed to be leaked: name, address, date of birth, sex, phone number, and PhilHealth identification number.
PhilHealth stated that they are remaining committed to resolving the matter at hand. In the meantime, members are encouraged to do the following precautionary measures:
- Monitor your credit reports for any unauthorized activity
- Place a fraud alert on your credit reports
- Change your passwords for all online accounts, especially financial accounts
- Be wary of phishing emails and smashing texts
PhilHealth's advisory came after its President and Chief Executive Officer Emmanuel Ledesma Jr. declared that the cyber threats they've received were only a bluff.
The cyber threats coming from anonymous social media posts claimed that hackers would allegedly reveal "materials and a video review" from PhilHealth's system online if it would not accept its demand for ransom.
"Kasi wala naman nawala sa membership data, they are saying they are going to bring out, so clearly it is a bluff. Isang araw na lang 'di ba, hintayin nalang natin ang bluff nila kung ilalabas nila," the PhilHealth president said in a press conference.
PhilHealth along with various government agencies like the Department of Information and Communication Technology (DICT) and the National Privacy Commission (NPC) are looking into the matter.