Data from 28M passports at risk

(UPDATE) THE personal data of some 28 million passport holders may have been compromised after the national printing office failed to install a cybersecurity system that would protect that information, the Department of Foreign Affairs (DFA) said Thursday.

Foreign Affairs Assistant Secretary Adelio Cruz of the Office of Consular Affairs made this revelation on Thursday at a Senate hearing on the department's proposed 2025 budget.

«We are really concerned with the security of our more than 28 million passport holders' data. It's something that we really want to protect. We've experienced a lot of agencies whose data had been hacked,» Cruz said, after Sen. Loren Legarda, chairman of the finance subcommittee, told him she didn't want to be surprised by a long wish list because the department forgot to include something.

«Some were sold on the deep web. Unfortunately, if I have to say it, we're not happy with the one GOCC (government-owned and -controlled corporation) that's in charge of printing our passport,» he said. «We are seriously looking into the possibility of employing a cybersecurity system for all our passport data.»

This prompted Legarda to say, «GOCC… I want it on record… [That's] APO. Please give us all the information if there is a threat to the security of our passport holders.… Is there a sale ongoing of any information that the GOCC holds? I've been hearing about that for a long time.»

«Unfortunately, they would not admit to the gravity or to the degree of the breach,» he said, referring to the APO Production Unit, a government-owned and -controlled corporation in charge of printing Philippine passports under the Presidential Communications Office. «We believe that's being sugar coated.»

«Perhaps it would be better if APO explains [the matter],» Cruz added.

The Manila Times called APO for comment, but was told that it was the DFA that should answer questions about passports.

Legarda said she wanted a meeting next week with concerned DFA and APO officials «so that we can be enlightened because I don't know the issue much.»

Cruz said they were negotiating with several cybersecurity companies and trying to get the best rate.

«We will be