Villar Group investigates claimed data breach
Learn More
The Villar Group of Companies has become the target of a possible data breach claimed by the hacker group Deathnote Hackers.
The Villar Group of Companies, owned by billionaire Manuel Villar, is one of the largest conglomerates in the Philippines, with interests spanning real estate, retail, construction, water distribution, and financial services.
The breach reportedly affects 11 million records, including sensitive data of employees, customers, and corporate transactions across various companies within the Villar Group, such as Camella, AllHome, PrimeWater, and others. Of these, 2.3 million records have been made available for sale online.
The claim of the breach was accompanied by a public message from the Deathnote Hackers, accusing the Villar Group of exploiting workers through unfair labor practices, including lack of proper contracts and forcing workers to engage in political activities during election seasons. The hackers further condemned the Villar Group’s role in damaging farmlands and the negative impact of the Rice Tariffication Law, spearheaded by Cynthia Villar, which they claim has harmed Filipino farmers.
The records claimed to have been compromised include:
- Customer names, addresses, and contact numbers
- Email addresses and company names
- Bank details and payslips
- Employee information, including sensitive details
- Passwords and production files
- Birth dates and company locations
- House addresses and pending project information
- Login portals and brand details
The leaked records, which date back from 2012 to 2024, span the core operations of the Villar Group, including its well-known brands like Camella, AllHome, Vista Mall, PrimeWater, Bria Homes, and others.
The exposed information could lead to identity theft, financial fraud, and corporate espionage.
Manny Villar, head of the Villar Group, has launched an investigation into the breach. The company has stated that its IT team is working to determine the extent of the damage and to secure its systems. Enhanced security measures have already been put in place as a precaution.
At this time, customers and stakeholders are advised to remain cautious while the investigation is ongoing.
