Philippines Bureau denies data breach amid rising cyber threats

The Bureau of Jail Management and Penology (BJMP) of the Philippines refutes claims by hackers regarding a breach of its private data, assuring the public of the integrity of its security measures despite a recent cyber intrusion.

In response to the cybersecurity breach orchestrated by the Philippines Exodus Security (PHEDS) hacker group, the BJMP asserted that no personal or sensitive data had been compromised. The bureau promptly initiated maintenance on its website and expedited plans for migration to a more secure platform to bolster its defenses against future threats.

Upon discovering the breach, the BJMP’s Directorate for Information and Communications Technology Management (DICTM) swiftly launched an investigation and implemented measures to mitigate its impact. These measures included password changes and a thorough inventory to assess potential data loss. It was determined that outdated security patches facilitated the unauthorized access, compounded by the lack of technical support from the Content Management System (CMS) platform.

The cyberattack on the BJMP’s website was made public by Deep Web Konek, a group monitoring Dark web activities in the Philippines, on X (formerly Twitter). PHEDS claimed to have accessed private data, but subsequent validation by the BJMP dispelled these assertions.

In a separate incident, the city government of Marikina announced the recovery of its hacked Facebook page with the assistance of law enforcement and cybersecurity agencies. The incident disrupted various city services, including disseminating important information like tax payment schedules.

Furthermore, the Department of Science and Technology (DOST) also fell victim to hackers, with its website experiencing a cyberattack possibly involving ransomware or political motives. Despite the system being locked out and encrypted, investigations are ongoing, with authorities indicating that the hackers may not have direct access to compromised data.