Philippine financial service provider data breach: Over 900,000 customers affected

Cebuana Lhuillier, a Philippines’ largest non-bank financial service provider, said on Saturday that about 900,000 customers were hacked by unauthorized hackers. The company has alerted the authorities and intervened in the investigation. The leak occurred when Philippine investigators launched an investigation into the Philippine Foreign Minister’s allegations of hacking into the country’s passport database. Last week, the Philippine Foreign Minister alleged that a privately contracted company had stolen documents and data from the Ministry of Foreign Affairs’ passport database.

Cebuana Lhuillier said that the hacker attack on the company’s marketing department’s email server caused to leak information such as the birthday, address and source of income of some customers. National Privacy Commission said, “We await further details as to scope and severity of the breach. We are committed to ensuring the data privacy of our clients and adhere to strict security protocols in protecting our interests. We will provide additional information regarding the incident as soon as it becomes available.”