Alleged NTC Data Breach Claimed by DeathNote Hackers
A threat actor identified as DNH, associated with the DeathNote Hackers group, has claimed responsibility for an alleged data breach involving the National Telecommunications Commission (NTC). The claim was published on a cybercrime forum, where the actor alleged that data had been obtained from the agency's official website.
According to the forum post, the threat actor claims to have exfiltrated approximately 126 GB of data comprising around 200,000 files, which were allegedly divided into multiple compressed archives. The threat actor claims the compromised dataset includes files in several formats, including:
• PDF documents
• Microsoft Word (DOCX) documents
• SQL database files
• JSON files
• Image files
• Executable (EXE) files
The post further alleges that the dataset contains a range of sensitive information, including names, email addresses, contact information, internal memoranda, credentials, identification-related records, image files, and other internal documents. These claims remain unverified.
Unlike financially motivated data extortion incidents, the forum post frames the alleged breach as a politically motivated operation. The threat actor published a lengthy statement criticizing the Philippine government's handling of the San Jose National High School shooting in Tacloban City, claiming authorities ignored prior warning signs related to violent extremism. The group presented the alleged leak as retaliation against government institutions rather than a traditional ransomware or extortion campaign.
At the time of publication, the authenticity of the alleged dataset has not been independently verified, and the National Telecommunications Commission has not publicly confirmed the alleged breach.
