MANILA – The Securities and Exchange Commission (SEC) on Monday said it has reinforced access controls and updated authentication of credentials, as well as verified data integrity on its system, following a recent breach.
“Additional technical safeguards and monitoring rules across the Commission’s digital infrastructure have likewise been implemented to prevent potential vulnerabilities and recurrence,” it said in a statement.
The Commission said a comprehensive investigation and system-wide audit is now being conducted in all its digital platforms “to ensure the integrity and security of its data.”
It explained that “initial findings indicate that no company records were affected by the incident.”
“No passwords were leaked and no data was modified or altered in any way. The SEC assures the public that all internal database infrastructure and system integrity remain intact,” it said.
However, it said that some personal data “may have been exposed” which include individual profile information.
“The Commission is currently verifying the origin, scope, and validity of these affected records. Upon discovering the issue, the SEC immediately initiated containment and preventive protocols, including comprehensive security scans, checks for indicators of compromise, digital forensics, and log analyses across all digital infrastructures to determine if any internal system showed signs of unauthorized access,” it said.
SEC added that it has also formally notified the National Privacy Commission of the incident.
“As the SEC continues to assess the impact of this incident, it enjoins the public to take standard security precautions to safeguard their personal accounts,” it added. (Joann Santiago-Villanueva/PNA)
