2026 Philippines SEC — platform leak; names, TIN, contacts

Data compromised

Full names, usernames, email addresses, mobile numbers, dates of birth, genders, addresses and Tax Identification Numbers of users of SEC online platforms. Passwords not leaked, the SEC says. Census unpublished. recordsAffected 0. Separate from the BIR taxpayer-leak claim, which the BIR has not confirmed.

Technical writeup

Root cause

The Philippines SEC became aware on 6 November 2026 of online reports of an alleged leak of platform-user data. Advisory 7 November. User notices 9 November. Reported to the National Privacy Commission. The agency says company records, passwords and data integrity of internal databases were not affected. Origin, scope and validity of the exposed records are still being verified.

References

• https://www.gmanetwork.com/news/money/economy/1008870/sec-confirms-data-security-incident-says-database-intact/story/
• https://fintechnews.ph/74327/security/sec-data-leak-philippines-users-tin/
• https://business.inquirer.net/620151/sec-probes-possible-breach-of-own-platforms