Cybersecurity a 'team effort,' DICT says after hack attack on DMW

MANILA, Philippines — As the Department of Information and Communications Technology is facing mounting pressure to bolster the government's cybersecurity defenses, a ranking official stressed the need for a whole-of-nation approach in preventing cyberattacks.

DICT Undersecretary Jeffrey Ian Dy attributed the security vulnerabilities of the Philippines to the lack of a comprehensive cybersecurity law and mandatory reporting requirements. The country ranks 29th out of 250 countries with the highest frequency of attacks, according to Norway-based private network provider Surfshark.

"Cybersecurity is a team effort. You can't have a star player while the rest of the team fails," he said in a radio interview on Radyo 630 Teleradyo Serbisyo on Wednesday.

"On the one hand, a hacker only needs to attach one [system], the rest becomes easier for him or her," Dy added in Filipino. "That's why as a country, we need a whole of nation approach."

He also noted that the Philippines, along with countries like the US, China, India and Russia that are facing geopolitical challenges, tend to be prime targets for attacks.

Dy's remarks came after the July 16 ransomware attack on the Department of Migrant Workers, which halted services to overseas Filipinos and forced department officers to manually process documents as a stopgap measure.

He confirmed that the DMW attack involved Lockbit, a strain that has supposedly already been taken down by an international coalition of 10 countries. "We are wondering how DMW was still affected by a Lockbit ransomware, so we're still investigating that," he said in Filipino.

Officials believe information was also extracted during the attack, but are yet to reveal its full extent in the early stages of the investigation.

"A ransomware would not activate if it was not able to extract [data]. They got [something], for sure. That's what we're asserting. Besides, the DMW is obligated to report this to the National Privacy Commission if there are personal identifiable information that has been compromised... They're just not ready to say what or to what extent," Dy said in mixed Filipino and English.

The incident comes on the heels of other major