A significant wave of cyber attacks compromised 23 institutions in the Philippines between November 5 and 7, 2026. The breaches involved millions of records, including sensitive personal and administrative data.
Notable agencies affected include the Department of Labor and Employment, which lost 19.2 million records, and the Office of the Vice President, from which DeathNote Hackers accessed about 12,979 PDF files on November 5.
Happy Go Lucky PH reportedly accessed up to 19 million resident profiles from the Department of the Interior and Local Government. CrimsonSec Philippines accessed 292,424 entries from the Land Transportation Office.
The breaches also impacted educational institutions such as the University of Camarines Norte and Cavite State University. The data exposures increase risks for targeted phishing attacks and identity theft.
The Armed Forces of the Philippines is investigating claims of a breach involving sensitive military personnel records. Attackers included groups such as DeathNote Hackers and Happy Go Lucky PH.
The full extent of the breaches and the methods used by the attackers are still being assessed.