MANILA (CORRECTED) — A coordinated wave of cyberattacks targeted multiple government websites on September 21, coinciding with nationwide rallies against flood control project anomalies.
The cyberattacks prompted swift action from the Department of Information and Communications Technology (DICT) and the Cybercrime Investigation and Coordinating Center (CICC).
According to DICT Secretary Henry Aguda, seven government agencies experienced breaches but were able to recover quickly.
"Maraming nag-attempt, we had 54,000 LGUs and 12,000 NGAs, and 7 lang ang nagkaroon ng breach pero na-recover agad nang mabilis," Aguda said.
Among the affected national agencies were: the Department of Budget and Management (DBM), Department of Public Works and Highways (DPWH), Bureau of the Treasury (BTr), Bureau of Customs (BOC), Department of Foreign Affairs (DFA). Thirteen local government websites were also compromised.
READ: Thousands join ‘Trillion Peso March’ at EDSA to protest corruption
CICC Usec. Renato "Aboy" Paraiso confirmed the attacks and emphasized the rapid response: "Though less than 1 minute of being defaced, nakapag-responde agad sa mga websites."
He assured the public that no personal or sensitive data was compromised, saying, "Walang public info/data ang na-hack, websites lang ng gov't ang mino-monitor."
Paraiso added that they are requesting raw footage of the riots that took place in Mendiola to identify the perpetrators using advanced facial recognition technology, together with Philippine National Police - Anti-Cybercrime Group (PNP-ACG).
"It will really depend on the case buildup ng law enforcements kung gaano katagal makapag-facial recognition ng mga nanggugulo, but we will provide the necessary manpower and resources to be able to catch the culprits," he said.
The DICT also reported that 23 government agencies had received threats prior to the attacks, with local hackers allegedly planning to target 21 websites. Only four were initially breached.
Meanwhile, in preparation for Super Typhoon Nando, DICT has activated emergency protocols in coordination with the NDRRMC.
"Nakatutok ang DICT sa cell services para ready sa typhoon, labin-lima namin na mobile vehicles naka-standby na rin," Aguda said.
Aguda also highlighted the importance of community vigilance in cybersecurity: "It's a community game, di lang whole of government, pero ang importante po na ang cybersecurity community ay they should police their ranks para ‘di mapahiya ang Pilipinas, gamitin natin ang cyberspace sa magandang paraan."
Aguda also urged the public to take cyber threats seriously: "Pakiusap na lang po, ‘di po biro-biro ang pag-deface ng website, may umaasa po sa mga gov't websites, so kapag may na-deface, may mga serbisyo na di maihahatid sa publiko."
With the ASEAN Cyberjaya Conversation Summit approaching in December, DICT expressed confidence in the country's cyber readiness.
"Na-dry run po natin this weekend yung cybersecurity teams, happy po ako na maganda yung performance, at hindi tayo mapapahiya sa ASEAN sa December, ready na po ang ating cyberposture," Aguda said.
Authorities continue to monitor the situation and are working closely with social media platforms to curb misinformation.