Jollibee's Data Breach Could Be Linked to Global Hacking Network on Dark Web, Says NPC

Earlier this week, it was reported that roughly 11 million customers' data had been compromised in a Jollibee Food Corp. breach. The incident is one of the biggest data leaks ever, with those involved losing their birth dates and senior identification number records to an unknown hacker. According to the National Privacy Commission (NPC), it might have been connected to a larger global hacking network.

The NPC had first been notified of the breach around 11:38 a.m. last Saturday. Soon enough, reports about compromising the company's centralized repository were confirmed to be true. The ones who had been affected were customers under brands such as Jollibee, Chowking, Greenwich, Red Ribbon, Mang Inasal, and Panda Express, among others.

“Maaari pong connected po ito sa string of extortion activities – ito po iyong paghingi ng pera kapalit ng datos or ransomware extortion activities na nangyayari ngayon sa buong mundo," added Millanes. "Hindi lang po Jollibee iyong tinamaan, pati po karamihan po ng mga kumpanya sa buong mundo ay tinamaan din po nitong ganitong klaseng pag-atake."

ALSO READ:

Apple Is the World's Most Valuable Brand Once Again

Disney, Tesla, and Apple Rank on Top for Brand Intimacy in 2022

In particular, the NPC's data link was the one hit the most during the attacks. It was said to have been the work of a group called "Spider." Based on the dark web, it would leak the data and ask for a large sum. The investigation, nevertheless, continues.

“Iyong extent po, inaalam pa po ng Jollibee sa ngayon at humingi po sila sa atin, allowed naman po iyan sa rules of procedure ng NPC, humingi po sila sa atin ng 20 days starting last Saturday, additional 20 days for them to be able to identify, personally identify and notify affected data subjects and also for them to conduct iyong kanilang internal investigation on the matter,” added Millanes.