The SEC confirms data breach affecting users of its digital platforms after reports of a possible leak surfaced online. The agency is now investigating the incident and has started notifying affected users.
According to the Securities and Exchange Commission (SEC), the exposed information might include users’ full names, usernames, email addresses, mobile numbers, dates of birth, gender, addresses, and Tax Identification Numbers (TINs).
The agency said the incident could have involved malware infections or unauthorized access linked to accounts used to access SEC services. It added that it is still validating the source and scope of the exposed data.
The issue gained attention after cybersecurity advocacy group Deep Web Konek reported a possible leak tied to SEC-related user accounts. In response, the SEC launched an investigation and stepped up security monitoring across its digital platforms.
The regulator stressed that no company records were affected by the breach. It also said there was no indication that data had been altered and that passwords stored in its systems were not exposed.
To address the incident, the SEC notified the National Privacy Commission and carried out security checks, log reviews, access control updates, and credential changes. The agency also conducted data integrity verification as part of its response efforts.
Also Read: BIR investigates alleged data leak
The SEC is advising users to change their passwords, scan their devices for malware, and stay alert for suspicious emails, text messages, and phone calls that may be linked to phishing attempts.
The investigation is ongoing as the agency works to determine the full extent of the breach.
Source: 1
