PhilHealth may not recover breached data, urges password change

PhilHealth admitted on Wednesday that it might not be able to recover data compromised in a ransomware attack on September 22.

The agency is urging members using the website's member portal to change their passwords immediately and warns against sharing these new passwords with others.

PhilHealth will notify affected members after analyzing information uploaded by hackers, who failed to infiltrate the main database but gained access to employees' work stations.

Hackers released data onto the Dark Web after missing a ransom deadline, and PhilHealth is forming a cybersecurity task force to prevent future attacks.