Philippines — Cyber Threat Profile
The Philippines maintains a moderately developed cybersecurity posture coordinated by the Department of Information and Communications Technology (DICT). National priorities include protecting government systems, financial infrastructure, and telecommunications networks. The country faces a mix of cybercrime, ransomware, hacktivism, and espionage activity linked to regional geopolitical tensions. Incident response capability is supported by the National CERT, though resource and coordination challenges persist. Legislative frameworks and workforce development programs continue to evolve amid expanding digital exposure.- National CERT/CSIRT: CERT-PH / National Computer Emergency Response Team (NCERT)
- Data protection authority: National Privacy Commission (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.24 / 100, #27 worldwide
- Secure Internet servers per 1M people (2024): 131.6 (source: World Bank)
- Internet users (2024): 67.3% of population (source: World Bank)
Threat actors targeting Philippines
- APT38 APT
- Mustang Panda APT
- Naikon APT
- Qilin Ransomware · 16 incident(s)
- LockBit Ransomware · 5 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- DragonForce Ransomware · 3 incident(s)
- Payload Ransomware · 3 incident(s)
- RansomHub Ransomware · 3 incident(s)
- The Gentlemen Ransomware · 3 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- 8Base Ransomware · 1 incident(s)
- APT73 Ransomware · 1 incident(s)
- Audit Team Ransomware · 1 incident(s)
- Aurora Ransomware · 1 incident(s)
- Black X Ransomware · 1 incident(s)
- Cl0p Ransomware · 1 incident(s)
- Coinbase Cartel Ransomware · 1 incident(s)
- Dark Project Ransomware · 1 incident(s)
- Deadlock Ransomware · 1 incident(s)
- Dire Wolf Ransomware · 1 incident(s)
- Emperador Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Krybit Ransomware · 1 incident(s)
- Medusa Ransomware Ransomware · 1 incident(s)
- NightSpire Ransomware · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- SafePay Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- Stormous Hacktivist · 1 incident(s)
- Titan Ransomware · 1 incident(s)
- APT10 APT
Most targeted sectors
- Business & Professional Services 11 incident(s)
- Manufacturing 8 incident(s)
- Transportation & Logistics 6 incident(s)
- Financial Services 5 incident(s)
- Hospitality & Tourism 5 incident(s)
- Education & Research 3 incident(s)
- Government & Public Sector 3 incident(s)
- Healthcare 3 incident(s)
- Technology 3 incident(s)
- Agriculture & Food 2 incident(s)
- Energy & Utilities 2 incident(s)
- Real Estate 2 incident(s)
Recent claimed incidents
- cenmar-manila.com 2026-09-08 · Manufacturing
- Philippine Ports Authority 2026-09-05 · Transportation
- Globalport Terminals 2026-08-27 · Transportation
- LifeBank Microfinance Foundation 2026-08-22 · Financial Services
- Questronix 2026-08-20
- Megawide 2026-08-16 · Manufacturing
- City Government of Baguio 2026-08-12 · Government & Defense
- LT Group / Fortune Tobacco Corp 2026-08-10 · Manufacturing
- Health Carousel 2026-08-10 · Healthcare
- TSC Logistics 2026-08-05 · Transportation
- LCC 2026-08-04 · Professional Services
- Philippine Savings Bank 2026-08-01 · Financial Services
- AppleOne Properties 2026-07-23
- FAST Logistics Group 2026-07-18 · Technology
- www.twtci.com Trans World Trading 2026-07-13 · Business Services