Stolen PhilHealth data now being 'shared illicitly' – NPC

Metro Manila (CNN Philippines, October 10) — The country's privacy watchdog warned individuals or groups against circulating and processing stolen account information from the Philippine Health Insurance Corporation (PhilHealth) after it received reports that the data was being «shared illicitly.»

The National Privacy Commission (NPC) released a statement on Tuesday to issue a «critical warning» on the leaked personal information of millions of Filipinos affected by the PhilHealth hacking.

«We want to emphasize the gravity of this situation and the severe consequences that await anyone involved in processing, downloading, or sharing this data without legitimate purpose or without authorization,» the NPC said.

The agency said penalties range from ₱500,000 to ₱4 million, with imprisonment of up to six years.

The NPC added that the further circulation of the data may make Filipinos vulnerable to criminal activities, such as identity theft, fraud, extortion, and blackmail, among others.

It also urged the public to report any illegal act involving the leaked information to authorities.

The Department of Information and Communications Technology on Monday said the number of affected PhilHealth members was «significant,» and in the «millions.»

READ: PhilHealth cyberattack likely hit 'millions' of members – DICT

Authorities earlier said hackers may face up to 20 years in prison.

The NPC also said officials of the state-run health insurer may also be slapped with legal charges over possible negligence.