THE Bureau of Jail Management and Penology (BJMP) yesterday said no sensitive information was stolen by a group of hackers who breached its website last Friday.
BJMP spokesman Chief Inspector Jayrex Bustinera also said the bureau has taken measures to address the cyberattack perpetrated by the Philippine Exodus Security, a hacker group targeting government websites.
“The BJMP assures (the public) that no sensitive or personal data was compromised in the said breach,” Bustinera said in a phone interview.
Bustinera said the hackers breached the BJMP website (bjmp.gov.ph)through “old” or “inactive” user accounts.
“We don’t’ know what is their intention,” said Bustinera, noting that the bureau has not uploaded on its website personal information of BJMP personnel and inmates or persons (PDLs) deprived of liberty.
“There are no personnel or sensitive data there, including those of the PDLs… What we have there are reports that are for public consumption,” Bustinera said.
He said sensitive data about BJMP personnel and PDLs are not included on the BJMP website, in keeping with the security protocol that they are following.
Nevertheless, Bustinera said the BJMP is taking the breach seriously. “That is why we have a full-blast investigation. We reported it to the Department of ICT (Information and Communications Technology)…There is an ongoing investigation,” he said.
Bustinera also said user names and passwords are being changed and the website is “under maintenance” to ensure its security from possible similar attacks in the future.