National Privacy Commission Initiates Inquiry into Alleged DOST Data Breach

National Privacy Commission Initiates Inquiry into Alleged DOST Data Breach

April 8, 2024 - In light of recent reports, the National Privacy Commission (NPC) is conducting an investigation into an alleged data breach within the Department of Science and Technology (DOST). According to the press release from the NPC, approximately 597 DOST employees’ personal data may have been compromised.

The NPC’s Complaints and Investigation Division (NPC-CID) carried out an on-site investigation at the DOST Central Office on April 4, 2024. Early assessments suggest the potential exposure of personal and sensitive information, including names, gender, civil status, and addresses, as well as resumes from DOST job applicants.

Following protocol, DOST notified the NPC of the breach on April 5, 2024, as mandated by NPC Circular 16-03, which also requires the notification of affected individuals within a 72-hour window.

The NPC advises the public to refrain from accessing or disseminating the data dump illegally, emphasizing that such actions are punishable by law.

The NPC is committed to transparency and will provide updates on the investigation’s progress. For more information or to report concerns, the public can visit the NPC’s official website or reach out to their Public Information and Assistance Division.

For additional details, please refer to the NPC’s official communication channels.