{
 "response": [
  {
   "Event": {
    "uuid": "446b346b-7a44-5532-8c71-35d337e2b559",
    "info": "10 Philippine Government Institutions Fall Victim to Data Leak",
    "date": "2026-11-11",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/10-lembaga-pemerintah-filipina-jadi-korban-kebocoran-data-20261111/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.cnnindonesia.com/teknologi/20261111125419-185-1425837/10-lembaga-pemerintah-filipina-jadi-korban-kebocoran-data",
      "comment": "CNN Indonesia Technology (Indonesian)",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (CNN Indonesia Technology (Indonesian)), Nov 11, 2026. Title machine-translated from Indonesian. Type: data breach; sectors: government. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "c60aa734-7703-58e5-9153-f565285c2a0c",
    "info": "AFP probing into alleged Air Force data breach",
    "date": "2026-11-10",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     },
     {
      "name": "misp-galaxy:sector=\"Defence\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/afp-probing-into-alleged-air-force-data-breach-20261110/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2339099/afp-probing-into-alleged-air-force-data-breach",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2339430/afp-probes-alleged-data-breach-involving-air-force",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 1 outlet (Philippine Daily Inquirer), Nov 10 to Nov 11, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "efb0048b-1906-59f6-857f-a6c4b1fdb614",
    "info": "SEC probes data breach",
    "date": "2026-11-10",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/sec-probes-data-breach-20261110/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.manilatimes.net/2026/11/10/news/sec-probes-data-breach/2465889",
      "comment": "The Manila Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (The Manila Times), Nov 10, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "f219f4b6-a053-5ace-86f8-a7159450a4f7",
    "info": "BIR 'data leak' under gov't probe",
    "date": "2026-11-07",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/bir-data-leak-under-govt-probe-20261107/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.gmanetwork.com/news/topstories/nation/1008620/bir-data-leak-under-gov-t-probe/story/",
      "comment": "GMA Network",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (GMA Network), Nov 7, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "49cda955-ac90-53e9-bff2-0397937d21fd",
    "info": "OVP suffers alleged data leak – cybersecurity group",
    "date": "2026-11-05",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/ovp-suffers-alleged-data-leak-cybersecurity-group-20261105/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2336392/ovp-suffers-alleged-data-leak-cybersecurity-group",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Nov 5, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "d64046a9-94db-5aee-acb5-5296dca055d8",
    "info": "St. Luke’s Medical Center reports personal data breach",
    "date": "2026-11-04",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     },
     {
      "name": "misp-galaxy:sector=\"Health\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/st-lukes-medical-center-reports-personal-data-breach-20261104/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2335706/st-lukes-medical-center-reports-personal-data-breach",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Nov 4, 2026. Type: data breach; sectors: health. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "4a8a52c2-7e62-5ef0-8de0-c6323f11330c",
    "info": "Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach",
    "date": "2026-11-04",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/philippine-migrant-worker-data-likely-leaked-in-69gb-government-breach-20261104/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.darkreading.com/cyberattacks-data-breaches/philippine-migrant-worker-data-69gb-government-breach",
      "comment": "Dark Reading",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Dark Reading), Nov 4, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "3c2f8296-afc4-5ae1-b3c5-7c327d98475b",
    "info": "NPC probes data breach",
    "date": "2026-10-31",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/npc-probes-data-breach-20261031/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.philstar.com/nation/2026/11/01/2566996/npc-probes-data-breach",
      "comment": "PhilStar Global",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.gmanetwork.com/news/topstories/nation/1008995/npc-confirms-data-breaches-in-doj-dict-8-other-gov-t-agencies/story/",
      "comment": "GMA Network",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (GMA Network, PhilStar Global), Oct 31 to Nov 10, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "f3ce5f35-37d4-582a-9083-10bc1fa168b1",
    "info": "Elderly man held over hacking of drinking buddy in Batac City",
    "date": "2026-10-17",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"intrusion\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/elderly-man-held-over-hacking-of-drinking-buddy-in-batac-city-20261017/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2325428/elderly-man-held-over-hacking-of-drinking-buddy-in-batac-city",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Oct 17, 2026. Type: intrusion. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "80bdb79e-b771-53c3-a919-a5429e71344e",
    "info": "DOJ reports five pending espionage-related cybercrime cases",
    "date": "2026-10-15",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"espionage\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/doj-reports-five-pending-espionage-related-cybercrime-cases-20261015/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2324410/doj-reports-five-pending-espionage-related-cybercrime-cases",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Oct 15, 2026. Type: espionage campaign. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "a7848b05-58f7-5601-b2af-2e0b00d4b9ce",
    "info": "Two men hacked during drinking spree in Bukidnon",
    "date": "2026-10-04",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"intrusion\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/two-men-hacked-during-drinking-spree-in-bukidnon-20261004/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2316742/two-men-hacked-during-drinking-spree-in-bukidnon",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Oct 4, 2026. Type: intrusion. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "baec1a13-8eb1-5558-ab71-f81eea027b1c",
    "info": "DICT probes possible data breach involving 48 firms in accreditation program",
    "date": "2026-09-26",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/dict-probes-possible-data-breach-involving-48-firms-in-accreditation-p-20260926/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.gmanetwork.com/news/topstories/nation/1003779/dict-probes-possible-data-breach-involving-48-firms-in-accreditation-program/story/",
      "comment": "GMA Network",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (GMA Network), Sep 26, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "290561ca-30e3-5285-a009-abd8b087da6b",
    "info": "LTFRB flags data breach",
    "date": "2026-09-21",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/ltfrb-flags-data-breach-20260921/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.philstar.com/nation/2026/09/22/2557918/ltfrb-flags-data-breach",
      "comment": "PhilStar Global",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (PhilStar Global), Sep 21, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "f1476ab0-3323-5ac3-b877-7ff0d1f46d07",
    "info": "LTFRB addresses security breach in online support platform",
    "date": "2026-09-19",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/ltfrb-addresses-security-breach-in-online-support-platform-20260919/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.manilatimes.net/2026/09/19/news/ltfrb-addresses-security-breach-in-online-support-platform/2428770",
      "comment": "The Manila Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://newsinfo.inquirer.net/2308133/ltfrb-probes-data-breach-as-platform-goes-offline",
      "comment": "Philippine Daily Inquirer",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.gmanetwork.com/news/topstories/nation/1003007/ltfrb-platform-down-amid-security-breach-probe/story/",
      "comment": "GMA Network",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 3 articles in 3 outlets (GMA Network, Philippine Daily Inquirer, The Manila Times), Sep 19 to Sep 20, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "f7d316db-381f-51e6-a4ea-729844292af2",
    "info": "Qilin ransomware compromises the Philippine Ports Authority",
    "date": "2026-09-05",
    "threat_level_id": "1",
    "analysis": "2",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"curated\""
     },
     {
      "name": "securitystudies:type=\"ransomware\""
     },
     {
      "name": "misp-galaxy:country=\"philippines\""
     },
     {
      "name": "misp-galaxy:sector=\"Transportation and Maritime\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/qilin-ransomware-compromises-the-philippine-ports-authority/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.hookphish.com/blog/ransomware-group-qilin-hits-philippine-ports-authority/",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://ctiwatch.com/victims/0e550d65-88dc-4a3b-9d25-8d5d367e65e4-philippine-ports-authority",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.moxfive.com/blog/qilin-ransomware-2026-ttps-victims-and-defense-guide",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "The Philippine Ports Authority was compromised on 5 September 2026 in an intrusion attributed to the Qilin ransomware operation and subsequently added to the group's data-leak site as part of a double-extortion campaign. The victim sits squarely in the transportation and maritime logistics sector at a time of heightened South China Sea tension, giving the incident strategic as well as commercial significance. Qilin remained the most prolific ransomware brand globally in 2026, with more than 500 victims claimed during the year.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  }
 ]
}