Philippine Air Force HRMIS Allegedly Compromised, Threat Actor Claims 6GB of Data Stolen
#MMM2026: An alleged data breach involving the Philippine Air Force's Human Resource Management Information System (HRMIS) has surfaced on a dark web forum, with a threat actor claiming to have obtained approximately 6GB of data containing sensitive military personnel and administrative records.
The listing, published under the forum's Leaks section by a user identified as DN@PH, features a screenshot of what appears to be the Philippine Air Force HRMIS login or welcome page. The threat actor claims that the compromised dataset contains approximately 19,173 PDF files, allegedly exposing various categories of internal military and personnel-related information.
According to the forum post, the allegedly obtained information includes confidential and restricted command order documents, logistics records, promotion records, military camp and base information, personnel full names, and unique personnel identification numbers.
The threat actor further claims that the dataset totals approximately 6GB and has been made available for download through the forum listing.
In its accompanying statement, the poster questioned the effectiveness of passkey authentication and multi-factor authentication (MFA) when the underlying system is improperly configured. The remark suggests that the alleged incident may involve weaknesses beyond authentication controls, although no specific vulnerability, intrusion method, or initial access technique was disclosed.
