Philippines sees 19.2 million credentials leaked in first half of 2026

A report by Viettel Cyber Security reveals that over 19.2 million user credentials in the Philippines were compromised during the first half of 2026. The Cyber Threat Landscape Report details 255 data breach incidents that exposed approximately 335 million records and 2.6 terabytes of data across the country.

Significant breaches occurred between March and April, with coordinated attacks on financial institutions compromising roughly 99 million records. Additionally, a breach involving a public service agency exposed 45 million records. Attackers also utilized malicious software to exfiltrate 1.8 terabytes of confidential internal data from financial organizations.

The report highlights an increasing reliance on generative AI by cybercriminals to conduct sophisticated phishing and impersonation schemes. These include the use of AI-generated deepfake voices and videos to mimic bank representatives or government officials to steal One-Time Passwords (OTPs). Other prevalent threats include ransomware, romance scams, and fake job recruitments. The findings also noted 34,650 new software vulnerabilities, with unpatched systems remaining a primary entry point for attackers.