The Philippine Securities and Exchange Commission (SEC) has reported that individual profile information may have been exposed in a data security incident detected on Nov. 6, 2026. Initial findings indicate that no company records were affected, no passwords were leaked and no data was altered.
An investigation and audit across all digital platforms and databases are underway, with the origin, scope and validity of potentially affected records still being verified. The response includes digital forensics and checks for unauthorized access. Access controls have been strengthened, authentication credentials updated and additional verification checks introduced for account requests and security updates. The National Privacy Commission has been formally notified under mandatory reporting procedures.
Users are advised to change passwords reused across online accounts, enable multifactor authentication where available and monitor accounts for unusual activity. They should also guard against unsolicited requests for personal information and avoid disclosing passwords, one-time passwords or email verification links.