DICT probes possible data breach involving 48 firms in accreditation program

Make this your preferred source to get more updates from this publisher on Google.

Company, employment, and security data may have been exposed in a possible data breach involving 48 companies participating in an accreditation program of the Department of Information and Communications Technology (DICT), the agency reported.

The DICT said the potential exposure relates to 410 files associated with the 48 companies, which are part in the DICT Trusted Assessment Provider (DTAP) program.

The DTAP engages with local cybersecurity service providers to help review and strengthen online systems before these are made available to the public.

In a statement on Friday, the agency said, "The Department of Information and Communications Technology (DICT) acknowledges the report of a possible data exposure involving a DICT Trusted Assessment Provider (DTAP)."

The amount of data is about 600 megabytes, or approximately 770 megabytes when uncompressed.

"The reported files may include corporate registration records, permits, certifications, cybersecurity credentials, employment documents, and DICT performance evaluations," the statement read.

Probers are verifying if the exposure did occur, its source, nature, and the extent of compromised data.

The National Computer Emergency Response Team (NCERT) under the DICT Cybersecurity Bureau is investigating the incident.

"DICT assures the public and its accredited assessment providers that the matter is being actively managed. The Department calls on the media and the public to exercise appropriate caution in sharing or reporting unverified information while the investigation is ongoing," the agency said.

If the data breach is verified, the DICT said it would take appropriate action and notify affected parties in line with the Republic Act 10173 or the Data Privacy Act of 2012. — VDV, GMA News