Cyber Incident Victim: University of the Philippines Cebu
Date:
Jun 2020
Location:
Philippines
Summary
Hackers reportedly breached the University of the Philippines Cebu's evaluation system, prompting investigations into potential data exposure. The institution assured stakeholders that no sensitive personal information was compromised and confirmed its primary Student Academic Information System remained secure. The incident coincided with the appearance of suspicious social media accounts impersonating students and alumni, which also affected individuals unaffiliated with the university. While unauthorized access to the evaluation platform was acknowledged, officials emphasized that critical databases were not infiltrated during the attack.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In early June 2020, reports emerged of suspicious "dummy" accounts appearing on social media platforms bearing names of University of the Philippines Cebu (UP Cebu) students and alumni. These accounts surfaced on Sunday, June 7, 2020, according to local media reports. The development prompted concerns about potential data breaches affecting the university community. UP Cebu Chancellor Liza Corro subsequently addressed these concerns by issuing public assurances that no sensitive personal information had been compromised. She specifically clarified that the institution's primary Student Academic Information System (SAIS) database remained secure and had not experienced unauthorized access. The university acknowledged that hackers had targeted its evaluation system but maintained that this intrusion did not result in the exposure of confidential student or alumni data.
The incident generated broader cybersecurity concerns as the suspicious accounts affected both UP Cebu affiliates and unrelated internet users not associated with the university. Reports of potential personal data leaks circulated hours after the dummy accounts first appeared, though UP Cebu officials consistently denied any actual breach of sensitive information. The timing coincided with a separate confirmed breach at San Beda University, where hackers had compromised student portal credentials and publicly released data via Twitter on June 6. While UP Cebu's situation involved different systems and outcomes, the proximity of these incidents heightened awareness about academic institution vulnerabilities. The university's response focused on public reassurance through official statements rather than disclosing specific technical containment measures or forensic findings regarding the evaluation system intrusion.