Department of Information and Communications Technology (DICT)

The DICT reported an incident involving its eComplaints system, a third-party service linked to the eGov PH platform, where over 30,000 complaint records were allegedly exposed. The department clarified that the eGov PH app itself was not compromised, and the breach was isolated to the eComplaints system, which operates separately from the main infrastructure. DICT emphasized that no personal data on the eGov platform was leaked, as it remains encrypted and protected by cybersecurity measures. While the exact nature of the exposed records (e.g., whether they contained sensitive personal or financial details) was not confirmed, the incident raised concerns about third-party vulnerabilities in government digital services. DICT committed to providing updates as further verified information becomes available, reiterating its priority to safeguard citizen privacy. The incident did not result in a full-scale breach of the primary eGov PH system, but the exposure of complaint records even if non-sensitive could still undermine public trust in digital governance platforms.

Source: https://manilastandard.net/business/314645821/dict-denies-data-breach-on-egov-ph-platform.html

TPRM report: https://www.rankiteo.com/company/dictgovph

"id": "dic3833538092225",
"linkid": "dictgovph",
"type": "Breach",
"date": "9/2025",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Public Sector / ICT',
                        'location': 'Philippines',
                        'name': 'Department of Information and Communications '
                                'Technology (DICT)',
                        'type': 'Government Agency'}],
 'customer_advisories': 'Assurance that eGov PH platform data remains secure '
                        'and encrypted.',
 'data_breach': {'data_encryption': 'Confirmed (for eGov PH platform data)'},
 'description': 'The Department of Information and Communications Technology '
                '(DICT) denied reports of a data breach on its eGov PH '
                'platform, clarifying that the incident was isolated to the '
                'eComplaints system, a third-party service integrated with '
                'eGov PH. The eComplaints system is managed separately from '
                'the app’s main infrastructure. DICT stated there is no '
                'evidence of a data breach within the eGov PH App, and all '
                'personal information on the platform remains secure, '
                'encrypted, and protected by cybersecurity protocols. The '
                'department emphasized that safeguarding citizen privacy is '
                'its highest priority and will release updates as more '
                'verified information becomes available.',
 'impact': {'brand_reputation_impact': 'Potential (due to disputed breach '
                                       'claims)',
            'systems_affected': ['eComplaints system (third-party service)']},
 'investigation_status': 'Ongoing (awaiting further verified information)',
 'references': [{'source': 'DICT Public Statement'}],
 'response': {'communication_strategy': 'Public denial of eGov PH breach; '
                                        'clarification on isolated eComplaints '
                                        'system incident; commitment to '
                                        'updates.',
              'incident_response_plan_activated': 'Yes (public statement '
                                                  'issued)'},
 'stakeholder_advisories': 'Priority on citizen privacy; updates to be '
                           'released as information is verified.',
 'title': "Potential Data Exposure in DICT's eComplaints System (Isolated from "
          'eGov PH Platform)',
 'type': 'Data Exposure (Disputed Breach)'}