MANILA, Philippines—The Office of the Solicitor General (OSG) did not notify the country’s data privacy watchdog about the data breach that was flagged to it twice last March, a violation that is punishable with jail time and a hefty fine under the Data Privacy Act.
TurgenSec, a London-based cybersecurity company, said in a statement that it had alerted the OSG and the Philippine government about the data breach on March 1 and 24.
Over 345,000 official documents were leaked online, including sensitive information on pending court cases and information on witnesses.
Under current rules, the National Privacy Commission (NPC) needs to be notified of a data breach within 72 hours. However, more than two months since the breach was brought to OSG’s attention, the NPC said on Tuesday (May 4) that it has not yet received any notification from the OSG.
TECHNOLOGY
TECHNOLOGY
TECHNOLOGY
TurgenSec said the OSG never replied to their e-mails, although the breach was closed on April 28, which the company assumed was done using information it had provided.
TurgenSec is behind the project, which is responsible for the continued disclosure of significant UK data breaches. In an afterword following its statement, TurgenSec said the OSG data breach was discovered during research and development for one of its products.
