Incident

Philippine Bureau of Jail Management denies exposure of sensitve data after cyberattack


Learn More

The Philippines Bureau of Jail Management and Penology (BJMP) is struggling to explain a  cybersecurity incident on its website and has refuted claims by hackers that they accessed private data intended to be protected.

The attack was carried out by the Philippines Exodus Security (PHEDS), a group  targeting government websites. The BJMP emphasized in a statement released on Sunday that no personal or sensitive data were compromised during the breach. The website has been put under maintenance, with plans expedited for migration to a more secure platform.

Upon the breach's discovery, the BJMP's Directorate enforced changing passwords and conducting an inventory to evaluate any potential data loss. It was determined that the breach occurred due to outdated security patches on a Content Management System (CMS) platform, which had ceased receiving technical support.

The number of affected individuals is not clear, BJMP claims there are none.

Philippine Bureau of Jail Management denies exposure of sensitve data after cyberattack