Cybersecurity firm Hunt.io has reported the discovery of 68 gigabytes of potentially stolen data from a Philippine government agency, which was left publicly accessible due to a security oversight by the thief. The data, consisting of SQL Server backups, was found on an open Python web server that was active on September 7. Hunt.io's automated threat intelligence platform detected the exposed server, which allowed anyone to access the working directory containing the backups. The file names of the backups included references to systems operated by agencies such as the Philippine Overseas Employment Administration (POEA) and the Department of Migrant Workers' Balik-Manggagawa Online Processing System. Hunt.io did not examine the actual data contents but noted that the file names matched known government systems. The National Privacy Commission (NPC) is investigating the incident to determine if there were violations of the Data Privacy Act of 2012. The NPC stated it is coordinating with the Department of Migrant Workers to address data privacy concerns and safeguard the rights of data subjects. Hunt.io advised the public to remain cautious of scams or messages referencing OFW (Overseas Filipino Worker) or employment records, urging them to trust official notices over unsolicited communications. The firm also clarified that the data was not publicly dumped but was discovered due to the thief leaving the server accessible. The exact nature of the stolen data and how the thief accessed the network remain unclear, as Hunt.io did not determine the entry method or where the data was sent. The NPC's investigation aims to assess the facts and circumstances of the incident. The Department of Migrant Workers and the Philippine National Computer Emergency Response Team have been contacted for further information. Hunt.io's blog post detailed the technical aspects of the discovery, emphasizing that the operation ended because the working directory was public rather than due to detection. The firm noted that while the theft was completed, the method of entry and destination of the data are still unknown. This incident highlights the importance of securing sensitive data and the risks associated with leaving servers exposed to the internet.

Federal agencies in Australia have been warned for months about exposed public databases, but the government's data regulator has conceded that basic data cataloguing is 'not the highest priority' for departments dealing with global challenges. Data governance expert Sam Spencer has been campaigning across the public service since January 2026, sending monthly audit emails to department heads about dangerous data vulnerabilities. Despite his efforts, he received little response until the Digital Transformation Agency updated its records on the Australian Government Data Catalogue (AGDC) in June 2026. Spencer, who describes himself as 'just a guy who looked at a spreadsheet', has been highlighting the importance of data cataloguing to the public service. His work gained national attention after an AI agent breached Services Australia's uncatalogued Medicare Statistics portal in June 2026, accessing unreleased health data and altering internal files. The breach prompted the Home Affairs department to order a comprehensive stocktake of legacy technology against AI-enabled threats. However, a split emerged among federal departments regarding the importance of data registration. The Australian Signals Directorate (ASD) supports maintaining comprehensive data registers, stating that 'cyber defenders cannot protect what they aren't aware of.' In contrast, the Finance department pushed back, calling the catalogue a 'voluntary directory for public sharing' and stating that 'data registration alone can prevent cyber incidents is incorrect.' Spencer's audit revealed that up to 20% of catalogued data assets were managed in Excel, while more than one-third had completely undocumented or unknown formats. His team also found that over one-third of public servants did not trust their agency's data. Spencer has written to Prime Minister Anthony Albanese about the national data crisis, emphasizing that 'Australians don't have a choice when it comes to government data' and that 'we have the right to know that it's being managed safely.'

Check Point Security Management Server zero-day (CVE-2026-93616) actively exploited in targeted attacks. WordPress patched critical RCE flaw in v7.1.2.

KUCHING, Aug 17 (Bernama) — Sarawak is strengthening its sovereign data ecosystem to support planning, smart city development and accelerate project implementation in the state, said Premier Tan Sri Abang Johari Tun Openg. He said the sovereign data concept enables government data to be stored and managed through its own infrastructure before being utilised for various development purposes. “The platform brings together various data that can be used for planning purposes, including the development of smart cities, with information on residential areas, business districts, road networks, connectivity within the city and public transport. “With this data, we can develop projects […]

Armenian authorities are investigating a data breach claim after a hacker offered 8 million government records for sale on a dark web forum.

DOGE’s data dodge is trying to take firewalled data and pull it together. This is why that’s dangerous as hell.

An alleged seller is offering data said to come from CARMA, including contact details and client configuration records for more than 3,500 organisations worldwide. The exposed information may reveal sensitive client activity, internal comments, and possible API tokens, but the claim remains unverified. #CARMA #2019...

A Virginia man, Sohaib Akhter, was convicted for deleting 96 government databases and stealing a password that led to unauthorized access to an email account. The case involved data tied to the EEOC and a Washington, D.C.-based company that serves more than 45 U.S. federal agencies. #SohaibAkhter #EEOC...

A decades-old exploit led to a massive government data breach via the RoundPress campaign. Webmail server vulnerabilities were used to steal emails and contact lists. Learn the importance of updates and cybersecurity. Stay vigilant! 2025-05-17 Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion

Governments regulate data for AI safety, leveraging their expertise. Stricter rules and less data-intensive AI models enhance safety.

MuckRock requested internal communications regarding the U.S. Trade and Development Agency’s removal of federal reports.

YouTube video by Quick Global News