A threat actor has allegedly breached the Civil Service Commission (CSC) of the Philippines and is attempting to sell the stolen data on a dark web forum. The CSC is a highly important government body, acting as the central personnel agency for the entire Philippine government. It is responsible for the policies, plans, and programs that affect all civil service employees across the nation. The alleged breach reportedly exposes the sensitive information of 76,718 unique users, placing a significant number of government workers at risk.
The compromised data contains a wide range of personally identifiable information (PII) and professional details. The threat actor claims the dataset includes details such as full names, email addresses, contact numbers, and specific employment information. This exposure could lead to targeted phishing campaigns, identity theft, and other malicious activities aimed at government employees. The leaked information also appears to contain detailed feedback from training sessions, further exposing personal opinions and internal data.
The data allegedly includes the following:
- Enrollee ID
- Full Name and Suffix
- Status
- Sex
- Position and Position Level
- Name of Agency/Office
- Contact Number
- Sector
- Nature of Employment
- Organizational Role
