The Department of Information and Communications Technology (DICT) clarified reports about an alleged hacking incident involving the eGov PH platform, saying the app itself was not compromised.
According to the DICT, claims circulating online that more than 30,000 complainant records were exposed are linked to the eComplaints system, a third-party platform integrated into eGov PH but managed separately.
“There is no evidence of a data breach within the eGov PH App,” the DICT said. “All personal information stored within the eGov platform remains secure, encrypted, and protected by strict cybersecurity protocols in line with the Data Privacy Act of 2012 and internationally recognized standards.”
The agency assured the public that the eGov PH app continues to function normally. It also promised to release updates as soon as more verified details become available.
“The DICT remains steadfast in its mission to provide secure, reliable, and citizen-centric digital services. Safeguarding the privacy of Filipino citizens is our highest priority, and we will continue to strengthen our systems to prevent similar incidents in the future,” the department said.
On a separate incident, the Cybercrime Investigation and Coordinating Center (CICC), working with the DICT, its National Computer Emergency Response Team (NCERT), and the Philippine National Police (PNP), is investigating two other incidents that happened during the Ayala Bridge rally: violence during the protest and hacking attempts on several government websites.
The CICC said it will request access to video footage from media organizations to help identify those involved in the violence. Facial recognition and other lawful tools will be used, while the right to peaceful expression will still be respected.
Investigators are also looking into the Black Mask Movement, whose insignia appeared at the rally and which may have claimed responsibility online.
“We are establishing the connections of this group with other hacker collectives. We want to make it clear; we can identify these groups, and we will pursue them,” said Undersecretary Renato Paraiso of the CICC.
CICC said that hackers targeted websites of several government agencies and local government units. Affected sites included those of the Department of Budget and Management (DBM), Department of Public Works and Highways (DPWH), Bureau of Customs, Bureau of the Treasury, Department of Foreign Affairs (DFA), and some regional offices of the Department of Education (DepEd). Disruptions included temporary defacement and denial-of-service attacks.
The DICT said the attempts were quickly contained and had minimal effect. It explained that government systems had been strengthened ahead of time, and agencies were already preparing for possible attacks a week before Sept. 21.
“We were able to brief and prepare agencies ahead of time,” said DICT Secretary Henry Aguda. “This weekend served as a dry run of our ASEAN preparations in December, and our cybersecurity posture proved resilient. Considering the scale of our digital assets, there were no critical disruptions. Our agencies responded quickly and effectively.”
The CICC stressed that while freedom of expression is protected, attempts to disrupt peace or compromise digital systems will not be tolerated. The public is urged to report cyber incidents through hotline 1326.