Privacy Commission Examines Possible Breach of Overseas Employment Records
The Philippines has launched an investigation into the suspected copying of nearly 69GB of database backups connected to government overseas employment systems. The National Privacy Commission (NPC) is examining the incident in coordination with the Department of Migrant Workers (DMW). Cybersecurity researchers reportedly identified evidence that 27 Microsoft SQL Server backup files were copied on September 6, 2026. The incident has raised concerns about the protection of sensitive information associated with Filipino migrant workers and overseas employment services.
Cybersecurity Findings Reveal Suspicious File Transfers
According to the initial findings, the 27 database backup files, totalling approximately 68.8GB, were transferred in less than 24 minutes. Their filenames reportedly referenced the former Philippine Overseas Employment Administration and overseas Filipino worker systems. Researchers also identified connections between subsequent file retrievals and servers associated with government employment portals. However, the available evidence has not established where the copied files were ultimately stored or whether the information was accessed by unauthorised individuals.
Extent of Potential Data Exposure Remains Unclear
The investigation has yet to determine how the operator gained access to the databases or whether personal information was compromised. Researchers discovered transfer logs, suspicious software components and tools associated with Windows network environments on an exposed server. These findings provide important leads but do not confirm that malicious software was executed on government systems. Authorities will need to establish the circumstances surrounding the incident, identify any security weaknesses and determine whether the country's Data Privacy Act of 2012 was violated.
Authorities Work to Establish the Full Impact
The National Privacy Commission has stated that it is coordinating with the Department of Migrant Workers to assess the incident and safeguard the rights of affected individuals. The investigation will examine the available technical evidence and determine whether further action is necessary. For now, officials have not confirmed the full extent of the alleged data theft or established that migrant workers' personal details were exposed. The findings could highlight the importance of stronger cybersecurity measures for government databases handling sensitive employment and identity information.
Share This Post
