NPC: Data breach victims may sue -- Daily Tribune

Philippine Health Insurance Corp., or PhilHealth, members affected by the ransomware data breach can sue if it is determined that the agency had been negligent in securing its database. This course of action was proposed by the National Privacy Commission on Tuesday. "Individuals affected may file a complaint with NPC and, if proven, they can claim damages. However, we cannot determine as of now how much, and usually it will be case to case," the NPC said. PhilHealth emphasized on Monday that it is ready to face any inquiry to be conducted by the NPC, the National Bureau of Investigation and the Philippine National Police on the hacking incident. The NPC had issued a "critical warning regarding the leaked personal data from the PhilHealth (system)." "It has come to our attention that the personal data exfiltrated from PhilHealth is being shared illicitly," the NPC said, referring to ...