Push Admin

PhilHealth says threats to expose alleged hacked data 'only a bluff'

Article (news)

Joyce Balancio, ABS-CBN News

<div class="embed-wrap"><figure data-feedback="fb:likes,fb:comments"><img alt="Philippine Health Insurance Corporation (PhilHealth) officers manually process members’ transactions in Quezon City on September 28, following the shutdown of their online system due to a cyberattack. Maria Tan, ABS-CBN News " src="https://sa.kapamilya.com/absnews/abscbnnews/media/2023/news/10/02/20230926-philhealth-office-mt-3.jpg"/><figcaption>Philippine Health Insurance Corporation (PhilHealth) officers manually process members’ transactions in Quezon City on September 28, following the shutdown of their online system due to a cyberattack. <em>Maria Tan, ABS-CBN News </em></figcaption></figure></div><p>MANILA — State insurer PhilHealth on Monday said it was not worried over threats that information taken by hackers would be exposed to the public following a cyberattack in September. </p><p>Some social media posts claimed that hackers allegedly possessed “materials and a video review” taken from PhilHealth’s system and were threatening to leak the data online if PhilHealth would not give in to their demand for ransom.</p><p>PhilHealth President and Chief Executive Officer Emmanuel Ledesma Jr. said membership data and medical records were “intact and protected” after the insurer immediately shut down its online systems following the Medusa Ransomware attack. </p><p>No ransom money was paid or would be paid to hackers, he said.</p><p>“Kasi wala naman nawala sa membership data, they are saying they are going to bring out, so clearly it is a bluff. Isang araw na lang diba, hintayin nalang natin ang bluff nila kung ilalabas nila,” Ledesma said in a press conference.</p><p>Ledesma added that they were anticipating that the group behind the attack might attempt to release distorted information through various channels and portray themselves as “heroes”.</p><p>He urged the public to promptly report any sensitive information found online or on social media to PhilHealth and the Department of Information and Communications Technology (DICT) to prevent further dissemination.</p><p>“Let’s be vigilant lang. We have nothing to hide in PhilHealth. Like I said nothing…the membership records are intact so if that if that’s going to be fabricated records, and not real and true. Hopefully ma-determine ng public what right and what is not,” Ledesma added.</p><p>As of Monday, PhilHealth reported that three out of eight external systems were back online, including the corporate website, the member portal and e-claims system.</p><p>The state insurer and DICT have not yet identified the alleged crime “syndicate” behind the attack but have noted the weakness in the system that made it vulnerable to cyberattacks.</p><p>“We currently have a general anti-virus, anti-cybersecurity, but it is not updated, and probably that is where the hackers came in, through that weakness,” Atty. Eli Dino Santos, PhilHealth’s Executive Vice President and Chief Operating Officer said.</p><p>“There were procurement issues, so for me the reason why the strict compliance with procurement rules and regulations, that is why we were not able to activate or continue with the system, that is why we weren’t able to update the system,” he added.</p><p>To address the recent attack, PhilHealth activated an “incident response system” and approved an emergency procurement for an additional layer of “cyber and information security systems”.</p><p>“We assure the public that we can address whatever attack may happen now and in the future. That is why our President and CEO approved our emergency procurement of the incident response systems and this will prevent present attack and any attack in the future,” Santos said.</p><p>PhilHealth also recommended that a “national task force” be formed composed of agencies such as the DICT, National Bureau of Investigation, Philippine National Police and other relevant government offices to prevent cyber attacks against all government offices.</p><div><strong>RELATED VIDEO</strong></div><figure class="op-interactive"><iframe allow="autoplay; fullscreen" frameBorder="0" height="100%" id="ivsplayer01" scrolling="no" src="https://player.ivideosmart.com/ivsplayer/v4/dist/html/iframe-src.html?iframeid=ivsplayer01&amp;key=e8c22c015ca9eafa76f1e3edfa03c603&amp;spid=3001339&amp;vid=2818529" width="100%"></iframe></figure><div class="iwantbar">Watch more News on <a href="https://www.iwanttfc.com/#!/browse/Genres/News/tag_id_genres/id_news" target="_blank">iWantTFC</a></div>

PhilHealth said it was not worried over threats that information taken by hackers would be exposed to the public. 

PhilHealth says threats to expose alleged hacked data 'only a bluff'

News

Entertainment

Lifestyle

Sports

Metro.Style

More

Traffic

Manila

Horoscope

News

PhilHealth says threats to expose alleged hacked data 'only a bluff'

Joyce Balancio,

ABS-CBN News

Published Oct 02, 2023 05:50 PM PHT

Read More:

PhilHealth

Medusa Ransomware

hacking

DICT

data privacy

ABS-CBN is the leading media and entertainment company in the Philippines, offering quality content across TV, radio, digital, and film. Committed to public service and promoting Filipino values, ABS-CBN continues to inspire and connect audiences worldwide.

Corporate

Investors

Governance

International Distribution

Corporate

Governance

Investors

International Distribution

NPC Seal of Registration

Privacy Policy

AI Policy

Terms of Service

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.