PHILIPPINE MIGRANT WORKER DATA LIKELY LEAKED IN 69GB BREACH

Summary from the TLDR InfoSec newsletter

An unknown actor copied 27 SQL Server backup databases belonging to the Philippine Overseas Employment Administration in 24 minutes. The 69GB set includes migrant-worker records, contracts, accreditation data, and cashier and LandBank financial records. The attacker used GodPotato, SeImpersonate, and Impacket, then left logs and tools on an open Singapore staging server. The stolen backups have not appeared for sale, and the final destination remains unknown. Hunt.io notified CERT-PH and the Department of Migrant Workers.