Cyber threats targeting Philippine organizations continued to escalate in the third quarter of 2026, with more than 9 million compromised credentials, over 10,900 phishing attacks, and 83 data breach incidents recorded, according to the latest Cyber Threat Landscape Report from Viettel Cyber Security (VCS).
Covering July to September 2026, the report found that 83 data breaches exposed approximately 85.9 million records, affecting government entities, financial institutions, consumer services, and other industries. Ransomware incidents also nearly quadrupled year on year, increasing from five cases in Q3 2025 to 19 in Q3 2026.
Phishing attacks rose 43% year on year to 10,913 incidents. The banking, financial services, and insurance (BFSI) sector accounted for 29% of reported attacks, followed by government impersonation at 24% and social media-related threats at 16%.
VCS also warned that cybercriminals are increasingly using AI-generated deepfakes to impersonate trusted authorities and make fraudulent schemes more convincing.
Credential theft emerged as another major concern, with compromised credentials linked to Philippine users more than doubling from 4.3 million in the same quarter last year. The year-to-date total reached over 28.3 million, nearly three times the figure recorded throughout 2025.
The growing availability of stolen credentials through the Stealer-as-a-Service model is also making cybercrime more accessible. Criminals can rent information-stealing tools and purchase compromised account details to carry out account takeovers, business email compromise, and ransomware attacks.
Among the significant incidents identified, six online lending platforms suffered data breaches involving approximately 32 million records. A separate transportation sector incident exposed 16 million records, while attacks involving public institutions and healthcare facilities compromised identity documents and internal systems, including more than 3.5 million hospital data files.
VCS Country Manager Thomas Luu emphasized that stolen passwords have become one of the easiest entry points into corporate networks, urging organizations to strengthen account security and monitor suspicious access.
Looking ahead to 2027, VCS recommends that Philippine organizations adopt a more proactive cybersecurity strategy through stronger account protection, continuous threat monitoring, timely software updates, regular data backups, and improved incident response capabilities.
The report also highlights the importance of assessing third-party security risks and strengthening employee awareness as cyberattacks become increasingly sophisticated.
