Rappler reported that the DILG, the Philippines' interior and local government department, got reports of a data breach in its Barangay Information Management System. The system holds resident profiles and helps local offices handle ordinances, certificates and disaster plans. The DILG said the records involved list names, civil status, jobs, addresses and contact details. They also mark whether a person has a disability, works overseas or is a solo parent.
The DILG calls it a potential breach. It said it has told the National Privacy Commission, taken precautions and started an investigation. Users got an email asking them to report odd use of personal data. Rappler does not say how the breach happened, how many people are affected, or whether anyone took or misused the data. Rappler also says the commission reported leaks at ten other government agencies. St. Luke's Medical Center reported unauthorised access to its mobile app, which an outside provider runs. Rappler does not say the cases are linked.
The listed fields tie status details to a name, address and phone number. That is more sensitive than a plain contact list. Rappler notes the Data Privacy Act of 2012 holds agencies responsible for records that outside firms handle for them. Buyers of such systems should ask who processes the data.