Ransomware attack leaks data of up to 20M PhilHealth users

A ransomware attack on PhilHealth's database has compromised personal information of up to 20 million individuals, including around 600 to 800 employees.

The Medusa ransomware attacked PhilHealth on September 22, leading to a temporary shutdown of its online systems and the leak of data to a website and Telegram channel on October 5.

PhilHealth confirmed that most affected are indirect contributors like senior citizens and indigents, with details including names, dates of birth, addresses, phone numbers, and PhilHealth ID numbers.

The corporation is exploring different methods for notifying affected members, including an online portal, text messages, emails, or traditional mail.