GSIS probing data breach

The Government Service Insurance System (GSIS) on Friday confirmed and is now investigating an incident of a cybersecurity breach in its systems.

In a statement, GSIS said that at 5:12 p.m Thursday, it received a notice from its security partner “that a local threat actor had compromised the administrator account of one of our computers.”

The breach, the state-owned pension fund said, was shared on the Facebook page of the local threat actor.

“The affected computer has been taken offline as we actively investigate the incident to assess the extent of the breach,” GSIS said.

“The affected computer is a test computer and contains dummy data used for the tests,” it said.

The pension fund, nonetheless, said it is now validating the claims of the intruder in order to ensure full compliance with the requirements of the Data Privacy Act.

“We assure our employees, members and pensioners that the protection of their information is of utmost priority,” it said.

GSIS said it is implementing needed measures to protect its systems and information.

“GSIS will continue to take all actions needed to ensure the security and privacy of the information entrusted to us,” the pension fund said. — Ted Cordero/RSJ, GMA Integrated News