MANILA: The Armed Forces of the Philippines (AFP) said on Tuesday that it was investigating an alleged data breach involving the Philippine Air Force (PAF), following online claims that sensitive military personnel and administrative records had been compromised.
AFP spokesperson Col Francel Margareth Padilla said military cybersecurity units were examining the allegations but had yet to establish whether any information had been compromised.
“At this point, these are mere speculations,” Padilla said at a press briefing at Camp Aguinaldo in Quezon City.
She said the AFP monitors thousands of attempted cyberattacks daily and maintains safeguards to protect its systems.
“There is no impenetrable system. What is important is that we have the proper security that are in place,” she added.
The investigation follows a post by the Facebook page Deep Web Konek, which alleged that a hacker had obtained files from the PAF's Human Resource Management Information System (HRMIS).
According to the post, the supposedly compromised records included confidential command orders, logistics and promotion documents, information on military camps and bases, and personnel names and identification numbers.
Deep Web Konek is a Philippine-based cybersecurity advocacy and threat intelligence group.
The group, which monitors cyber threats and reported data breaches, also announced on Facebook that it had received an official invitation to participate in an Association of Southeast Asian Nations (ASEAN) Information and Communications Technology event. However, the specific event and issuing organisation could not be independently verified.
The alleged hacker also claimed to have made the files available for download on a dark web forum.
The authenticity of the files and the reported breach have not been independently verified.
Asked whether the alleged exposure of military personnel records could compromise operations, Padilla said the potential impact would depend on the nature and extent of the information involved.
She added that the military could conduct forensic investigations, if necessary, to determine the authenticity of the reports and strengthen its defences.
Padilla did not provide a timeline for completing the investigation, saying the AFP would release updates once its technical personnel had submitted their findings.
PAF spokesperson Col Alvin Jay Capinguian likewise said the Air Force's 950th Cyber Wing was coordinating with the AFP Cyber Command to verify the reports.
“The Air Force did its due diligence. We checked and elevated everything to the AFP Cyber Command,” he said. - Inquirer/ANN
