Walang ransom na ibabayad sa mga hacker ng PhilHealth – DICT

Tinutukoy pa rin ng Cybersecurity Bureau, isang attached agency ng Department of Information and Communications Technology (DICT), kung paano napasok ng mga hacker ang sistema ng Philippine Health Insurance Corp. (PhilHealth).

Patuloy na inaayos ng Philippine Health Insurance Corp. (PhilHealth) ang kanilang sistemang tinamaan ng ransomware, isang uri ng cyberattack, ayon sa Department of Information and Communications Technology (DICT).

Sa isang pahayag, sinabi ng DICT na tumulong na ang Cybersecurity Bureau, isang attached agency ng kagawaran, para ayusin sistema ng PhilHealth.

“Efforts to restore the functionality of PhilHealth’s DNS (Domain Name System) server are underway,” ayon sa DICT.

“We shall continue to investigate and monitor the acquired logs from PhilHealth’s affected systems. The DICT condemns the ransomware attack carried out against PhilHealth in an attempt to illegally access the information of its members,” dagdag pa nito.

Unang sinabi ng PhilHealth na natukoy nito ang 72 na workstations na tinamaan ng Medusa ransomware attack, na nagdulot ng shutdown ng kanilang sistema.

Nagbanta ang mga hacker na ibebenta ang data ng PhilHealth kung hindi magbabayad ng US$300,000 na ransom, na katumbas ng P17 milyon.

Pinanindigan ng PhilHealth na hindi ito magbabyad ng ransom.

Sa panig ng DICT, nagsasagawa na ito ng assessment para tantyahin ang kahandaan ng PhilHealth na ibalik ang kanilang sistema online.

“The DICT is committed to ensuring the full restoration of security and stability in PhilHealth systems and to safeguarding government systems and infrastructure from malicious cyber threats,” ayon sa kagawaran.

“As of September 25, 2023, PhilHealth’s critical web services are only accessible via their IP addresses and currently ongoing comprehensive security scanning,” dagdag pa nito.