Four government agencies, a state university and a job portal were named in seven alleged data breaches or leaks reported on Nov. 5 by cybersecurity advocacy group Deep Web Konek.
The group identified the following in its reports:
- PhilJobNet
- Office of the Vice President
- Presidential Commission on Good Government
- Department of Information and Communications Technology
- Philippine Air Force
- Nueva Ecija University of Science and Technology
A group calling itself DeathNote Hackers claimed to have extracted about 19.2 million records linked to PhilJobNet, the government job portal. It also claimed to have obtained about 10 gigabytes of documents associated with the Office of the Vice President’s scheduling platform.
Another hacktivist group, Happy Go Lucky PH, allegedly gathered about eight gigabytes of data from the Presidential Commission on Good Government.
Deep Web Konek also reported that a forum user claimed to have obtained about 3.6 GB of internal documents from the Department of Information and Communications Technology (DICT), including procurement and budget records.
Two reports involved separate Philippine Air Force (PAF) systems. One forum user claimed to have obtained about 11 gigabytes of files from the PAF’s Command Clearance System, including personnel records and copies of government-issued IDs.
A separate post claimed that about 6 GB of military personnel and administrative records had been obtained from the PAF’s Human Resource Management Information System.
The cybersecurity advocacy group also reported that a forum user claimed to have obtained personal and academic data belonging to more than 81,000 students at Nueva Ecija University of Science and Technology.
Deep Web Konek also reported two separate website incidents involving:
- Philippine Nurses Association
- Department of Science and Technology
The Philippine Nurses Association’s website was reportedly defaced and displayed a message from a group calling itself Nullsec Philippines. It remained unclear whether anyone accessed member or organizational data.
The Department of Science and Technology website was reported inaccessible for several hours; its cause remained undetermined.
In an Oct. 27 advisory, the DICT urged government agencies and critical infrastructure operators to strengthen their defenses against potential cyber threats around Nov. 5. Its National Computer Emergency Response Team recommended updating vulnerable systems, strengthening monitoring and checking whether institutions were ready to respond to incidents.
“This advisory does not confirm an imminent cyberattack against specific Philippine infrastructure,” it said.
The DICT recorded 38 cybersecurity incidents on Nov. 5, 2025. Denial-of-service attacks and system compromises accounted for a significant share of the incidents.
A distributed denial-of-service (DDoS) attack floods a website or online service with traffic from multiple sources, making it slow or inaccessible.
