Sensitive PNP, PH Navy info found in arrested hackers’ devices

Authorities recovered huge amounts of sensitive information that included data from the Philippine National Police and the Philippine Navy from two hackers who were arrested in Tagaytay City. 

In John Consulta’s Thursday report on 24 Oras, the National Bureau of Investigation (NBI) arrested suspects “Newbie” and “Godlike” after they tried to sell the personal information of thousands of cable subscribers in Tagaytay.

Also found in their electronic devices were databases that contained personal information of 300,000 members of the Philippine National Police (PNP) as well as data from the Philippine Navy on the West Philippine Sea. 

The duo said they have been targeting government websites since 2013.

“We are in the process of validating those claims. Pag lumabas ang aming forensic findings, magiging conclusive ang aming basis. That’s the time ipapatawag ang mga involved na government and private entities,” said National Bureau of Investigation (NBI) cybercrime chief Jeremy Lontoc.

(We are in the process of validating those claims. Once our forensic findings are released, our basis will be conclusive. That’s the time we would call the involved government and private entities.)

The Armed Forces of the Philippines (AFP) said it is coordinating with the NBI to verify the details of the data.

According to one of the hackers, one of the databases that he acquired contains personal information on 300,000 members of the PNP.

“May address, buong information, contact number, email (address). Nakita ko nandun yung firearms,” Newbie said.

(The database contains their addresses, contact numbers and email. I also saw some information about firearms.)

Newbie also admitted to the phishing activities he committed to bank clients, where he claimed to have earned millions of pesos.

“Pinapadalhan ko gamit ang email nila. Pag naclick nila, nag login po sila, dederecho sa system. 11 p.m., then after nuon, inaano ko ng 12 a.m.. Then, nagrereset ang limit po niya. Tulog din ang mga tao, wala silang kaalam-alam,” Newbie said.

(I would send a scam email using to their addresses at 11 p.m. When they click the link and log in, the money will go straight to the system. After that, the limit will reset at 12 a.m. The victims are unaware because they are already asleep.)

“Pagka may tumatawag sa inyo, from your bank, may nangyari daw sa iyong account, huwag kang maniwala, sabihin mo sige pupuntahan ko sa bangko. Ireport nyo sa amin, we have capability to locate yung number na tumawag sa inyo,” NBI director Jaime Santiago said.

(When someone calls you saying that they are from your bank and that something happened to your account, do not believe them. Tell them you will go to the bank to check. Report the incident to us because we have the capability to locate the number that called you.) —Mariel Celine Serquiña/RF, GMA Integrated News