The Bureau of Internal Revenue (BIR) has launched an urgent investigation into an alleged data leak, working closely with the Department of Information and Communications Technology (DICT) and law enforcement anti-cybercrime units.
BIR Data Leak
The incident, which reportedly occurred on Friday, November 7, prompted the Bureau to enhance its security protocols. While the tax agency has not disclosed the full extent of the potential breach or the specific types of data compromised, it assured the public that the claims are being treated with “utmost urgency and priority.”
To address the threat, the Bureau is coordinating with the National Computer Emergency Response Team (NCERT), the Cybercrime Investigation and Coordinating Center (CICC), and the Philippine National Police (PNP) Anti-Cybercrime Group.

This development follows a “brief defacement incident” on the BIR website on September 8. Although website services were quickly restored and core taxpayer systems were reportedly unaffected, the agency implemented additional security checks as a precaution.
The alleged BIR breach joins a growing list of recent cybersecurity incidents in the country. Just over a week prior, private healthcare provider St. Luke’s Medical Center reported a data breach involving its mobile application. That incident is currently under investigation by the National Privacy Commission, with an estimated 100,000 individuals potentially affected.
Government authorities and technical teams continue to assess the BIR’s network to safeguard sensitive taxpayer information and prevent further cyber vulnerabilities.

