2026 Philippines migrant-worker records — about 68.8 GiB of SQL Server backups reportedly copied; government probing, access not confirmed by the DMW (unverified)
Data compromised
Not confirmed. Press coverage says the filenames refer to former POEA online services, overseas Filipino worker databases, employment contracts and the Balik-Manggagawa system. No count of affected people has been published.
Technical writeup
Root cause
Hunt.io reported on October 28, 2026 that 27 Microsoft SQL Server backup files totalling about 68.8 GiB were copied on September 6, 2026, in under 24 minutes, and that the operator later pulled more tools from the exposed server. The report did not establish how the intruder got in or where the files went. The National Privacy Commission says it is investigating whether the Data Privacy Act was violated and is coordinating with the DMW. No DMW statement on the 2026 copying was found. The DMW said its July 2024 ransomware response did not compromise OFW databases.