THE National Privacy Commission (NPC) has launched the "Na-leak ba ang PhilHealth Data ko?" database search portal to help individuals verify their personal information status after a recent data breach of the Philippine Health Insurance Corporation (PhilHealth) database.
As of October 13, 2023, the portal currently contains data related to individuals aged 60 and above, encompassing approximately 1 million records out of the 8.5 million senior citizens affected.
The NPC said the primary objective of the tool is to empower Filipinos, particularly senior citizens, to proactively protect their personal information from risks like identity theft, financial fraud, phishing, extortion, blackmail, medical identity theft, reputational damage and privacy invasion.
The initiative is an independent project initiated by the NPC using a dataset reportedly released by the Medusa Ransomware Group.
The NPC said that approximately 734 GB of data has been extracted and is now being analyzed to update the portal, eventually offering data subjects of all age groups the information they need for peace of mind.
The portal is solely focused on the PhilHealth data breach and does not cover breaches from other sources. A negative result from the search should not be misinterpreted as a guarantee of data security elsewhere.
To use the portal, users must input their PhilHealth Identification Number (PIN), and the portal will verify whether their personal information was part of the leaked data.
Privacy Commissioner Lawyer John Henry D. Naga reaffirmed the NPC's commitment to data privacy and security.
"The NPC's development of the 'Na-leak ba ang PhilHealth Data ko?' portal in an exceptionally short period demonstrates our unwavering dedication to protecting your personal information. We understand the paramount importance of your data's safety, and this tool stands as a testament to our commitment to your security and peace of mind," Naga said.
"Through this groundbreaking initiative, we are here to empower you with the control and protection you deserve over your data and privacy. Your privacy matters, and your National Privacy Commission is here to protect it," he added.
The "Na-leak ba ang PhilHealth Data ko?" portal also plays a crucial role in enabling data subjects to ascertain the status of their personal data without incurring the potential risk of criminal liability.
The NPC said downloading, processing, or using the exfiltrated data from PhilHealth may constitute "unauthorized processing," a breach of the Data Privacy Act of 2012, particularly Section 25, carrying significant legal consequences. This portal helps individuals remain compliant with the law while safeguarding their personal information.
The NPC assured users that the "Na-leak ba ang PhilHealth Data ko?" database will be regularly updated to provide the most up-to-date information, gradually including data from all age groups affected by the PhilHealthLeak incident, offering a reliable resource for assessing the security of your personal data.
To access the "Na-leak ba ang PhilHealth Data ko?" database search tool, one can visit https://philhealthleak.privacy.gov.ph. The NPC also encouraged individuals to contact philhealthleak@privacy.gov.ph for other concerns. (SunStar Philippines)