By Beatrice Puente
(September 26, 2023) – A cause-oriented group on Tuesday sought accountability over the cyberattack against the Philippine Health Insurance Corporation (PhilHealth) because of its impact on the public’s personal information.
Infrawatch convenor Terry Ridon pointed out that PhilHealth should have undertaken better measures to secure its database so as not to compromise the integrity of information stored therein.
He said the P100.2 billion budget of the state health insurer for this year should have been used to improve its system.
“PhilHealth has failed to secure its database. Heads should roll. Why is there no adequate system in place to combat this mess?” said Ridon in a statement.
Starting last Friday, the Medusa ransomware has attacked the system of PhilHealth but the agency assured that its members can continue to avail of benefits from hospitals and other facilities. It has undertaken temporary measures to address the cyberattack.
The Department of Information and Communications Technology (DICT) has also stepped in. According to DICT undersecretary Jeffrey Ian Dy, the hackers are asking for $300,000 or around P17 million in exchange for the decryption keys.
He said the hackers promised to delete the data in their possession and refrain from publishing such information. They also vowed to give the DICT a copy of the data they have. But Dy recognized there’s no assurance that the hackers would stand by their word if the government yields to their request.
“Hopefully, together with our law enforcement agencies, we can apprehend the culprits. We also need to coordinate with our international counterparts since these criminals are operating internationally,” said Dy.
PhilHealth also assured that they won’t give in to the demands of the hackers.
Ridon stressed that the government should seriously deal with the situation because President Bongbong Marcos Jr. himself is pushing for the digitalization of government systems.
Ridon also asked if PhilHealth deployed cybersecurity mechanisms or conducted periodic stress tests to address these types of situations. He noted that other government agencies must not be complacent. Instead, he urged them to be prepared to avoid a similar predicament.
“A whole-of-government digital security review is in order. The government needs to act swiftly to protect the digital footprint of millions of Filipinos who depend on online mechanisms to tap government services,” said Ridon.
In his past speeches, Marcos described the digitalization of the economy as an urgent task because of the wide use of the internet. He added that small- and medium-scale industries must likewise be supported to help connect them with consumers.
“We cannot do all of the things that are necessary to transform our economy without good connectivity, with a high bandwidth, with good speed, and at a very affordable price. This is the aspiration,” said Marcos last March.
Last June, DICT secretary John Ivan Uy said their cybersecurity plan, which includes enacting a law on cybersecurity and protecting critical digital infrastructures, was only awaiting Marcos’ approval.
(PM)
Our Privacy Commitment
TV5 Network Inc. values and respects your privacy. We are committed to safeguarding your personal data in compliance with Republic Act No. 10173 or the Data Privacy Act of 2012 and its implementing rules and regulations.
We have developed a Privacy Policy that adopts and observes appropriate standards for personal data protection. While our Privacy Policy sets out the general principles governing the collection, use, and disclosure of our users’ personal information, our Privacy Commitment seeks to inform you more about TV5’s privacy practices.
Why do we collect your personal information (as applicable)?
We may collect and maintain basic information about you as site user of TV5 sites for the following purposes:
Where do we get your personal information?
There are several ways we collect your personal information.
Information that you personally provided.
Most of the personal information we have are those that you have provided us when you:
Information we collect during your engagement with us
We also collect information as you use our products and services, like:
Information we collect from other sources
Other means of collection of information may be through:
When do we disclose personal information?
There may be instances when we are required to share the information you provided us. In such cases, we ensure that your personal information will be disclosed on a confidential manner, through secure channels and in compliance with the Data Privacy Act and other privacy laws.
We will never share, rent, or sell your personal information to third parties outside of TV5 except in special cases where you have given consent, and in cases described in our privacy policy.
In some instances, we may be required to disclose your personal information to our agents, subsidiaries, affiliates, business partners and other third-party agencies and service providers as part of our regular business operations and for the provision of our programs and services. This means we might share your information with our service providers, contractors, and professional advisers who help us provide our services.
How we protect your personal information
The integrity, confidentiality, and security of your information is important to us. We have implemented technical, organizational, and physical security measures that are designed to protect your information from unauthorized or fraudulent access, alteration, disclosure, misuse, and other unlawful activities.
We also put in effect the following safeguards:
TV5 will not collect, use, or disclose your personal information for any purpose other than the purpose that you may have given your consent for.
What are your choices?
We make sure that we have your consent to continue to collect, use, and disclose your personal information for the purposes that we have identified. We want you to know that you may object or withdraw your consent and/or edit your consent preferences at any time.
If you wish to have access to the personal information in our custody or if you think that the personal information you provided is incomplete, or otherwise inaccurate, you may get in touch with our Data Protection Officer through the contact details provided below. In some instances, we may request for supporting documents or proof before we effect requested changes.
Data Protection Officer
TV5 Network Inc.
Reliance corner Sheridan Streets
Mandaluyong City
tv5dataprivacy@tv5.com.ph
What happens when there are changes in our Policy?
From time to time, we may update our privacy policy and practices to comply with changes in applicable laws and regulatory requirements, adapt to new technologies and protocols, and align with the best practices of the industry.
You will be provided notices if the changes are significant and, if we are required by law, we will obtain your updated consent.