4
BIR INVESTIGATES CLAIMS OF A DATA LEAK
The Bureau of Internal Revenue says it is investigating online claims that data associated with the agency have been leaked. It is working with the DICT, the National Computer Emergency Response Team, the Cybercrime Investigation and Coordinating Center, and the PNP Anti-Cybercrime Group.
The BIR has promised updates after verification. Its reported statements do not establish whether taxpayer records were exposed, what information might be involved, or how many people could be affected.
Separately, the National Privacy Commission said on November 6 that it would verify alleged leaks involving government agencies. That statement did not name the BIR or confirm a breach of its systems.
The commission also explained that, when mandatory notification conditions are met, an agency must notify it and affected people within 72 hours of knowing or reasonably believing that a qualifying breach occurred. An online allegation alone does not establish that those conditions have been met.
WHAT TO WATCH
Look for verified findings on the data’s authenticity, its connection to BIR systems, and any affected taxpayer records. If exposure is confirmed, the agency should identify who needs notice and what protective steps to take.