PhilHealth data breach affects 42M members, hackers demand $300K ransom

A data breach at PhilHealth in September 2023 has affected approximately 42 million individuals, according to the National Privacy Commission (NPC).

During a House appropriations panel hearing on Monday, July 8, NPC Director Maria Theresita Patula confirmed that patient medical records and billing files were among the compromised data.

PhilHealth Chief Operating Officer Eli Santos acknowledged during the hearing that none of the affected members have been informed about the breach and agreed to submit a status report by Wednesday, July 10.

Stella Quimbo, senior vice chairperson of the House appropriations panel, expressed concern over the breach and questioned whether PhilHealth had followed steps indicated under the Data Privacy Law to notify individuals within 72 hours.

Hackers are demanding $300,000 ransom for the leaked database, which includes records of senior citizens, rebel returnees, and indigent Filipinos, adding another layer of urgency to address the situation.