The Department of Information and Communications Technology (DICT) is investigating an alleged breach involving the Environmental Management Bureau’s (EMB) Company Registration System after a hacker group claimed to have extracted millions of company and client records.
In a Sept. 27 statement, the DICT said the incident was reported at about 2 p.m. that day. The system, which maintains business records including ownership and registration information, is under maintenance while incident responders assess the report.
DeathNote Hackers claimed it extracted data from the EMB Integrated Information System by targeting unsecured application programming interface endpoints.
According to Deep Web Konek, the group alleged that the files included about 3.83 million company-list records, 973,610 client-list records, and smaller sets of other and personnel-related records.
The DICT has not established whether the allegedly exposed information is authentic or came from the EMB Company Registration System.
“At this stage, the reported incident has not yet been confirmed. The authenticity of the exposed information, the extent of the alleged exposure, the source and method of access, and whether the information originated from the EMB CRS remain subject to further verification,” the DICT said.
The agency said its National Computer Emergency Response Team is coordinating with EMB personnel to determine whether unauthorized access occurred and whether any systems or databases were compromised.
