A pro‑Iranian hacker group known as Handala claims to have breached Lockheed Martin and leaked personal data of 28 senior engineers, including IDs and passport details. Threats were reportedly issued against employees if they did not leave Israel. Authorities are investigating the cyberattack.

Lockheed Martin Targeted by Pro‑Iran Hackers | Personal Data of Senior Staff Leaked

President Joe Biden is set to issue an executive order aimed at limiting the flow of sensitive US personal data abroad amid concerns of misuse by countries including China.

US to limit sales of Americans’ personal data to China, other adversaries

US to set limits on sale of personal data to foreign adversaries

<p>In a recent series of cyber incidents, the Philippines' weak cybersecurity practices have left government websites susceptible to breaches, endangering the security of millions of citizens.</p>

<p>Hackers targeted the Philippine Health Insurance Corporation (PhilHealth) in a breach affecting millions of individuals, including overseas Filipino workers, reported the South China Morning Post.</p>

<p>The breach resulted from the state insurer's refusal to pay a $300,000 ransom. Additionally, the House of Representatives' homepage was defaced, underscoring the government's vulnerabilities in the digital realm.</p>

<p>A hacker known as DiabloX Phantom claimed to have infiltrated five major government agencies, downloading significant amounts of data. His intent was to reveal the government's cybersecurity shortcomings.&nbsp;</p>

<p><a href="https://www.wionews.com/world/chinese-spies-are-trying-to-steal-uks-nuclear-submarine-secrets-mi5-chief-649568">Also read |&nbsp;Chinese spies are trying to steal UK's nuclear submarine secrets: MI5 chief</a></p>

<h2><strong>Government agency infiltrations and tactics</strong></h2>

<p>The hacker accessed the servers of the Philippine Statistics Authority, responsible for national identification cards, and the Philippine National Police's forensics database containing sensitive case files.</p>

<p>Additionally, he targeted the websites of the Department of Science and Technology, the Technical Education and Skills Development Authority (Tesda), and Clark International Airport.</p>

<p>His methods included exploiting weak passwords, sending malware via email, utilising open subdomains, and exploiting vulnerabilities left by other hackers.</p>

<p>DiabloX Phantom, as reported by the South China Morning Post, said that he did not intend to sell the data he obtained but aimed to draw attention to the government's cybersecurity vulnerabilities.</p>

<p><strong>Also watch |&nbsp;Over 80% Indian companies hit with cyber attacks last year: Report</strong></p>

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/over-80-indian-companies-hit-with-cyber-attacks-last-year-report-632769/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

<p>He sought a response from the government to address these issues. Philippine cybersecurity experts independently verified his claims. While there is no single entity responsible for the various breaches, some hackers aim to expose system vulnerabilities, seek recognition for their skills, or engage in cyber activities for amusement.</p>

<h2><strong>Historical cybersecurity lapses</strong></h2>

<p>The recent breaches in the Philippines are part of a pattern of cybersecurity incidents.</p>

<p>The "Comelec leak" in 2016 exposed personal data from up to 55 million Filipino voters. Despite the scale of this breach, there were no prosecutions or repercussions.</p>

<p>Weak passwords, inadequate employee training, and insufficient monitoring create vulnerabilities that need urgent attention. Addressing these issues is crucial to safeguard sensitive data and protect the privacy of millions of individuals.</p>

<p>The recent attempt to register SIM cards encountered challenges when criminal syndicates offered fake pre-registered SIM cards, undermining the government's efforts to combat mobile phone scams and crimes.</p>

<p>Registered SIM card users reported receiving scam texts. Law enforcement efforts led to arrests for selling fake "registered" SIM cards and the discovery of a large number of such cards in a raid on a gambling hub.&nbsp;</p>

<p><strong>WATCH WION LIVE HERE:</strong></p>

<p><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe></p>


In a recent series of cyber incidents, the Philippines' weak cybersecurity practices have left government websites susceptible to breaches, endangering the security of millions of citizens.

In a recent series of cyber incidents, the Philippines' weak cybersecurity practices have left government websites susceptible to breaches, endangering the security of millions of citizens. Hackers targeted the Philippine Health Insurance Corporation (PhilHealth) in a breach affecting millions of individuals, including overseas Filipino workers, reported the South China Morning Post. The breach resulted from the state insurer's refusal to pay a $300,000 ransom. Additionally, the House of Representatives' homepage was defaced, underscoring the government's vulnerabilities in the digital realm. A hacker known as DiabloX Phantom claimed to have infiltrated five major government agencies, downloading significant amounts of data. His intent was to reveal the government's cybersecurity shortcomings. Also read | Chinese spies are trying to steal UK's nuclear submarine secrets: MI5 chief Government agency infiltrations and tactics The hacker accessed the servers of the Philippine Statistics Authority, responsible for national identification cards, and the Philippine National Police's forensics database containing sensitive case files. Additionally, he targeted the websites of the Department of Science and Technology, the Technical Education and Skills Development Authority (Tesda), and Clark International Airport. His methods included exploiting weak passwords, sending malware via email, utilising open subdomains, and exploiting vulnerabilities left by other hackers. DiabloX Phantom, as reported by the South China Morning Post, said that he did not intend to sell the data he obtained but aimed to draw attention to the government's cybersecurity vulnerabilities. Also watch | Over 80% Indian companies hit with cyber attacks last year: Report He sought a response from the government to address these issues. Philippine cybersecurity experts independently verified his claims. While there is no single entity responsible for the various breaches, some hackers aim to expose system vulnerabilities, seek recognition for their skills, or engage in cyber activities for amusement. Historical cybersecurity lapses The recent breaches in the Philippines are part of a pattern of cybersecurity incidents. The "Comelec leak" in 2016 exposed personal data from up to 55 million Filipino voters. Despite the scale of this breach, there were no prosecutions or repercussions. Weak passwords, inadequate employee training, and insufficient monitoring create vulnerabilities that need urgent attention. Addressing these issues is crucial to safeguard sensitive data and protect the privacy of millions of individuals. The recent attempt to register SIM cards encountered challenges when criminal syndicates offered fake pre-registered SIM cards, undermining the government's efforts to combat mobile phone scams and crimes. Registered SIM card users reported receiving scam texts. Law enforcement efforts led to arrests for selling fake "registered" SIM cards and the discovery of a large number of such cards in a raid on a gambling hub. WATCH WION LIVE HERE:

Philippines faces cybersecurity crisis as hackers expose state secrets, personal data

<p>China's foreign ministry in Hong Kong has requested that foreign consulates based in the city provide personal information about their locally employed staff. This request includes job titles, home addresses, and identification details. This development was confirmed in a letter sent to consulates and seen by the Reuters news agency. The Hong Kong Office of the Ministry of Foreign Affairs issued a notice to foreign consulates in Hong Kong on September 18. In the sent letter, it sought the submission of relevant information regarding their locally employed consulate staff.</p>

<p>Also Read |&nbsp;<a href="https://www.wionews.com/world/france-detains-journalist-for-revealing-state-secret-slammed-by-rights-groups-637906">France detains journalist for revealing ‘state secret’, slammed by rights groups</a></p>

<p>The Chinese foreign ministry provided this information in a statement to Reuters.</p>

<p>In what appears to be a defence from their side, China's foreign ministry in Hong Kong stated that the request is in line with "international customary practices".&nbsp;</p>

<p>"This measure is in line with international customary practice. It is understood that Chinese consulates stationed abroad also provide local employee information to the host country according to local government requirements," the statement read.</p>

<p>Also Read |&nbsp;<a href="https://www.wionews.com/world/nagorno-karabakh-forces-surrender-to-azerbaijan-after-anti-terror-operations-637881">Nagorno-Karabakh forces surrender to Azerbaijan after ‘anti-terror’ operations</a></p>

<p>According to the letter, this new request is as per "Vienna Convention on Consular Relations, the Consulates General and the Office of the European Union" and therefore it is requested "to provide information on all locally engaged who have entered into employment contract."&nbsp;</p>

<h2><strong>Compliance deadline set</strong></h2>

<p>According to the letter, consulates are expected to comply with this request by October 18. It is worth noting that under Hong Kong's mini-constitution, Beijing has authority over foreign affairs concerning the special administrative region.</p>

<p>Hong Kong was a British colony until 1997 when it was handed back to China under a Sino-British Joint Declaration. This agreement was intended to ensure a high degree of autonomy and a "one country, two systems" framework for Hong Kong, allowing it to maintain its legal, economic, and political systems for 50 years after the handover.</p>

<p>Watch |&nbsp;<a href="https://www.wionews.com/videos/first-face-to-face-meeting-with-us-president-biden-since-netanyahu-returned-to-office-637893">First face-to-face meeting with US President Biden since Netanyahu returned to office</a></p>

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/first-face-to-face-meeting-with-us-president-biden-since-netanyahu-returned-to-office-637893/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

<p>However, the implementation of a national security law in Hong Kong in 2020 by China raised significant concerns.</p>

<p>Critics now argue that the law undermines the autonomy and freedoms promised to Hong Kong, as it grants sweeping powers to Beijing to suppress dissent and crack down on pro-democracy activists.</p>

<h2><strong>International concern</strong></h2>

<p>Many countries and international organisations have expressed concern over China's actions in Hong Kong. Moreover, sanctions and diplomatic measures have been imposed on China in response to perceived human rights violations and breaches of international agreements.</p>

<p>However, the Chinese government maintains that its actions in Hong Kong are aimed at maintaining stability and security. They argue that the national security law is necessary to prevent "secession, subversion, foreign interference, and terrorism" in Hong Kong.</p>

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<p><strong>WATCH WION LIVE HERE</strong></p>

<p><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></p>

<p>You can <strong>now write for wionews.com</strong> and be a part of the community. Share your stories and opinions with us <strong><a href="https://www.wionews.com/content-contribution-registration-form">here</a>.</strong></p>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

<p>&nbsp;</p>


China's foreign ministry in Hong Kong has requested that foreign consulates based in the city provide personal information about their locally employed staff. This request includes job titles, home addresses, and identification details.

China's foreign ministry in Hong Kong has requested that foreign consulates based in the city provide personal information about their locally employed staff. This request includes job titles, home addresses, and identification details. This development was confirmed in a letter sent to consulates and seen by the Reuters news agency. The Hong Kong Office of the Ministry of Foreign Affairs issued a notice to foreign consulates in Hong Kong on September 18. In the sent letter, it sought the submission of relevant information regarding their locally employed consulate staff. Also Read | France detains journalist for revealing ‘state secret’, slammed by rights groups The Chinese foreign ministry provided this information in a statement to Reuters. In what appears to be a defence from their side, China's foreign ministry in Hong Kong stated that the request is in line with "international customary practices". "This measure is in line with international customary practice. It is understood that Chinese consulates stationed abroad also provide local employee information to the host country according to local government requirements," the statement read. Also Read | Nagorno-Karabakh forces surrender to Azerbaijan after ‘anti-terror’ operations According to the letter, this new request is as per "Vienna Convention on Consular Relations, the Consulates General and the Office of the European Union" and therefore it is requested "to provide information on all locally engaged who have entered into employment contract." Compliance deadline set According to the letter, consulates are expected to comply with this request by October 18. It is worth noting that under Hong Kong's mini-constitution, Beijing has authority over foreign affairs concerning the special administrative region. Hong Kong was a British colony until 1997 when it was handed back to China under a Sino-British Joint Declaration. This agreement was intended to ensure a high degree of autonomy and a "one country, two systems" framework for Hong Kong, allowing it to maintain its legal, economic, and political systems for 50 years after the handover. Watch | First face-to-face meeting with US President Biden since Netanyahu returned to office × However, the implementation of a national security law in Hong Kong in 2020 by China raised significant concerns. Critics now argue that the law undermines the autonomy and freedoms promised to Hong Kong, as it grants sweeping powers to Beijing to suppress dissent and crack down on pro-democracy activists. International concern Many countries and international organisations have expressed concern over China's actions in Hong Kong. Moreover, sanctions and diplomatic measures have been imposed on China in response to perceived human rights violations and breaches of international agreements. However, the Chinese government maintains that its actions in Hong Kong are aimed at maintaining stability and security. They argue that the national security law is necessary to prevent "secession, subversion, foreign interference, and terrorism" in Hong Kong. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. ×

China requests personal data of Hong Kong consulates' local staff, sparks concerns

<p>It is a hangover that this Japanese worker would rather forget soon as he lost a USB drive that had the entire city’s personal details after a night out with his colleagues.</p>

<p>A private contractor, whose name has not been disclosed, lost the memory stick that has personal data on all of its 460,000 residents of the western Amagasaki city, northwest of Osaka, after going for drinks this week.</p>

<p>The employee of a company was commissioned to assist the city’s rollout of COVID-19 relief funds.</p>

<p>Public broadcaster NHK reported that the worker, a man in his 40s, fell asleep on the street after drinking alcohol at a restaurant. When he woke up, his bag containing the flash drive was gone.</p>

<p>The lost USB drive has data of residents’ names, addresses and dates of birth, as well as the bank account numbers of welfare-receiving households, among other information.</p>

<p>So far, there has been no evidence of data being leaked so far, the city officials said.</p>

<p>"We deeply regret that we have profoundly harmed the public's trust in the administration of the city," the&nbsp;Amagasaki official told a press conference, according to AFP news agency.</p>

<p><strong>Also read |&nbsp;</strong><a href="https://www.wionews.com/world/worlds-deepest-shipwreck-discovered-around-23000-feet-under-sea-491577" hreflang="en">World's deepest shipwreck discovered around 23,000 feet under sea</a></p>

<p>The employee reported to the police on Wednesday. However, there is a silver lining. The data was encrypted and protected with a password, according to the city.</p>

<p>“We will thoroughly ensure security management when handling electronic data,” the Japanese Times quoted city officials’ statement.</p>

<p>“We will work to regain our residents’ trust by heightening awareness of the importance of protecting personal information.”</p>

<p><em>(With inputs from agencies)</em></p>

<p><strong>WATCH WION LIVE HERE</strong></p>

<p><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></p>


It is a hangover that this Japanese worker would rather forget soon as he lost a USB drive that had the entire city’s personal details after a night out with his colleagues.

It is a hangover that this Japanese worker would rather forget soon as he lost a USB drive that had the entire city’s personal details after a night out with his colleagues. A private contractor, whose name has not been disclosed, lost the memory stick that has personal data on all of its 460,000 residents of the western Amagasaki city, northwest of Osaka, after going for drinks this week. The employee of a company was commissioned to assist the city’s rollout of COVID-19 relief funds. Public broadcaster NHK reported that the worker, a man in his 40s, fell asleep on the street after drinking alcohol at a restaurant. When he woke up, his bag containing the flash drive was gone. The lost USB drive has data of residents’ names, addresses and dates of birth, as well as the bank account numbers of welfare-receiving households, among other information. So far, there has been no evidence of data being leaked so far, the city officials said. "We deeply regret that we have profoundly harmed the public's trust in the administration of the city," the Amagasaki official told a press conference, according to AFP news agency. Also read | World's deepest shipwreck discovered around 23,000 feet under sea The employee reported to the police on Wednesday. However, there is a silver lining. The data was encrypted and protected with a password, according to the city. “We will thoroughly ensure security management when handling electronic data,” the Japanese Times quoted city officials’ statement. “We will work to regain our residents’ trust by heightening awareness of the importance of protecting personal information.” (With inputs from agencies) WATCH WION LIVE HERE

Cost of hangover: Japanese man loses USB drive with entire city's personal data after night out

T-Mobile is investigating a claim on an online forum post that says the personal data of over millions of users were breached.

T-Mobile investigates claim that says data of millions were breached

Zoom Video Communications Inc agreed to pay $85 million and bolster its security practices to settle a lawsuit claiming it violated users' privacy rights. The lawsuit claimed that the company was sharing personal data with Facebook, Google and LinkedIn, and letting hackers disrupt Zoom meetings in a practice called Zoombombing.

Zoom agrees to pay $85 million to settle lawsuit claiming it violated users' privacy rights

personal-data

Personal Data, News on Personal Data, stories on Personal Data, articles on Personal Data, Personal Data stories at Wion, Personal Data news, Personal Data latest news