DICT probing data breach of 48 firms

According to the DICT, around 410 files associated with the firms may have been exposed, comprising around 600 megabytes of data or around 770 MB when uncompressed.

BusinessWorld / DICT Facebook page

MANILA, Philippines — The Department of Information and Communications Technology is investigating a potential data breach involving 48 companies participating in its trust assessment provider (DTAP) accredited program.

According to the DICT, around 410 files associated with the firms may have been exposed, comprising around 600 megabytes of data or around 770 MB when uncompressed.

Among the files, which may have been exposed are corporate registration records, permits, certifications, cybersecurity credentials, employment documents and DICT performance evaluations.

An investigation has been launched to verify the reported exposure, including the authenticity, source, nature and extent of the data involved.

Should it be proven that personal or other protected data has been compromised, DICT “will take appropriate action,” including informing the affected companies in accordance with Republic Act 10173, or the Data Privacy Act, the DICT said. It assured accredited assessment providers that it is addressing the issue.

“DICT remains committed to the security of information entrusted to it and to the integrity of the DTAP accreditation program,” it said.