Philippine Cyber Incident Map, 2024 to present

Publicly reported ransomware, data leaks, defacements and intrusions affecting Philippine organizations, tracked by ARA Industries. Each entry links to its source and is marked confirmed (acknowledged by the victim or authorities) or alleged (attacker or researcher claim, not yet verified).

Get the free Cyber Ready Checklist Usap Tayo: book a call

Disclaimer: compiled from public reporting. Alleged entries are attacker or researcher claims that have not been verified; refuted entries were denied with evidence by the named organization. Inclusion is not a finding of fault. Pins mark the affected organization's head office (verified from official sources); pins marked approximate could not be tied to one head office and sit at a national centroid. Corrections: securenow@ara.ph.

Label Incident type Region Threat group Sector From To Search

Loading data…

Pins mark the affected organization's head office, not the attack origin or attacker location.

Incident log

Date ▾	Organization	Sector	Type	Threat group	Damage	Label	Source

Worried your organization could be next?

Most incidents on this map started with an exposed system, a stolen password or an unpatched website. Start with the free Cyber Ready Checklist: 39 plain-language checks across endpoints, backups, email and identity, patching, admin access, incidents and vendors. Answer Yes, Partly, No or Not sure and see where your gaps are.

Enter your details and the download opens on the next page. More free checklists for schools, BPOs, recruitment agencies and construction are on ARA Industries Solution Blueprints.

Prefer to talk? Usap Tayo

Security concern or active incident? Email securenow@ara.ph.

Data compiled by ARA Industries from public reporting (news, government statements, researcher and dark-web monitoring publications). Alleged entries are unverified claims. Map pins show the affected organization's head office, not the attack origin or attacker location.