Menu
Browse

Tertiary Education Subsidy

Aliases: 2 aliases
Primary URL Location Industry
unifast[.]gov[.]ph
Country Philippines
Government - National Icon
Government - National
Profile

The organisation is responsible for administering the Tertiary Education Subsidy (TES) program in the Philippines. It receives applications from students seeking financial assistance for tertiary education. It verifies eligibility based on criteria such as household income and enrollment status. Upon approval, it coordinates the disbursement of subsidy funds to qualified beneficiaries.

The program serves a large population of tertiary education learners across the country. According to the 2019 breach notification, personal information of over one million TES applicants was stored in its database. This indicates a nationwide reach that includes students from various public and private higher education institutions. The organisation’s activities therefore impact a significant segment of the Philippine student population.

As a government‑run entity, the organisation’s primary distinguishing attribute is its mandate to promote equitable access to higher education through financial support. It handles sensitive personal data, including identification numbers, names, birth dates, parental information, and addresses, as part of the application process. Its work requires close coordination with the Commission on Higher Education and individual colleges and universities to verify enrollment and academic standing. The subsidy program is positioned as a key component of the Philippines’ strategy to reduce financial barriers to tertiary education.

In March 2019, hackers breached the organisation’s database, exposing the personal data of applicants. The intruders accessed, deleted, and threatened to release the information unless a ransom was paid, deploying ransomware as leverage. The incident exposed weaknesses in the agency’s data protection and incident response capabilities. Following the breach, the organisation faced heightened scrutiny regarding its cybersecurity practices and the safeguarding of beneficiary information.

Incidents
Linked incidents available to members
1 incident