2026 Philippines BIR — taxpayer-data leak claim (unverified)
Data compromised
Actor/forum claim, unverified: taxpayer records, with some posts citing more than 10 million. BIR has not published a field list or a census. recordsAffected stays 0. A September BIR website defacement was assessed as not affecting taxpayer information or core systems, the bureau said at the time.
Technical writeup
Agency confirmed it is probing alleged posts, not that a leak happened. Do not treat 10 million as a matched census. Keep separate from philippines-sec-platforms2026.
Root cause
Online posts on 7 November 2026 alleged a BIR data leak, some citing more than 10 million taxpayer records. BIR says it is investigating with DICT, NCERT, CICC and PNP Anti-Cybercrime Group. It has not confirmed that taxpayer files left. NPC said on 6 November that leak allegations alone do not prove a personal-data breach. Unverified. Separate from the confirmed Philippines SEC platform-user notice.