Personal, corporate data may have been exposed in an alleged EMB system breach

The alleged incident renews concerns over government database security.

The Department of Information and Communications Technology (DICT) is investigating a reported unauthorized access involving the Environmental Management Bureau’s Company Registration System (CRS), which may have exposed personal and corporate information.

In a statement issued Sunday, September 27, the DICT said the alleged incident was reported at around 2 PM and involved the EMB system used to register, manage and maintain official business records.

The CRS contains information including company ownership, registration status and other corporate data.

According to the DICT, the reported exposure allegedly involves both personal and corporate information stored in the system. If confirmed, the incident could pose privacy and information security risks and compromise the confidentiality of information entrusted to the EMB.

However, authorities stressed that a breach has not yet been established.

“At this stage, the reported incident has not yet been confirmed,” the DICT said.

Investigators are still working to verify the authenticity of the allegedly exposed information, determine the extent of any data exposure, identify the possible source and method of access, and establish whether the information actually came from the EMB’s CRS.

It also remains unclear whether unauthorized access occurred or whether any EMB systems or databases were compromised.

The CRS has been placed under maintenance while incident responders conduct assessment and response activities.

The DICT, through the National Computer Emergency Response Team (NCERT), said it is coordinating with the concerned organization and will provide assistance in the investigation and any necessary remediation.

“Further information will be provided once the relevant facts and findings have been validated,” the DICT said.

The incident puts renewed attention on the security of government databases containing personal and corporate records, although the nature and scale of the reported EMB exposure remain unverified pending the investigation.

READ: