Incident

Philippines National Bureau of Investigation (NBI) investigates claimed data breach and leak


Learn More

The National Bureau of Investigation (NBI) in the Philippines is investigating a potential data breach after an anonymous user, operating under the alias "Zodiac Killer," posted allegedly leaked NBI information on a breach forum.

The incident came to light through a disclosure on the Philippine IT Security Forum on January 19, 2025.

NBI Director Jaime Santiago confirmed a breach but claims that the breach did not originate from the agency's own database but rather from a third-party provider responsible for handling clearance applications. The NBI's Cybercrime Division has initiated an investigation and is working with the third-party provider to determine the scope of the breach and implement appropriate security measures.

The compromised data reportedly includes:

  • Transaction IDs
  • Applicant names
  • Reference numbers
  • Payment statuses
  • Payment amounts
  • Purpose details
  • Transaction dates
  • Payment channel information
  • Branch codes

The number of affected individuals, the nature of the attack and the compromised third-party provider are not disclosed.

Philippines National Bureau of Investigation (NBI) investigates claimed data breach and leak