An unknown threat actor appears to have exfiltrated nearly 69GB of SQL Server backups from the Philippine Overseas Employment Administration (POEA), the agency that manages deployment of overseas Filipino workers, in under half an hour via a staging server, according to an analysis by security researchers. The data reportedly covers workers, contracts and financial records — a dataset of exceptional sensitivity given it concerns individuals working abroad, including in Australia, whose identities and finances would be prime material for fraud and impersonation. Dark Reading's reporting hedges the leak as "likely", and no statement from the POEA or the Philippine government had been published at the time of writing; the staging-server analysis suggests rapid exfiltration before detection. If confirmed, the breach adds another Southeast Asian government dataset to a region already wrestling with identity-fraud knock-ons from major leaks, and Australian employers of overseas workers should be alert to credential- and identity-fraud attempts in the coming months.

• Source article