Year2023 |
MonthNovember |
Reference number20231105 |
Impact areaShore |
Incident locationPhilippines |
Incident countryPhilippines |
Victim countryPhilippines |
Victim identityMagsaysay Maritime |
Victim TypeCompany office |
MethodRansomware |
In November 2023, Magsaysay Maritime Corporation (MMC) and Magsaysay Global Services, Inc. (MGSI) in the Philippines potentially suffered data breaches due to ransomware attacks by the Monti ransomware group. MMC discovered the breach on November 14, 2023, which may have resulted in the unauthorized acquisition of approximately one terabyte of data, including over 70,000 passports and other sensitive personal information. MGSI experienced a similar breach on November 17, 2023, with a hacker claiming to have downloaded approximately one terabyte of data, including an MMIS database dump. Both organizations are conducting forensic investigations to confirm the extent of the breaches and have implemented several measures to mitigate potential harm, such as resetting passwords, monitoring systems, and coordinating with government agencies. Affected individuals are advised to take precautions to protect their personal information.