Massive PCSO Data Breach Exposes Over 200,000 Individuals’ Private Information
Manila, Philippines – A massive cybersecurity breach has hit the Philippine Charity Sweepstakes Office (PCSO), exposing the personal details of more than 200,000 individuals, including allegedly lottery winners, applicants, and employees. The stolen data includes names, addresses, phone numbers, email addresses, government-issued IDs, and internal communications.
https://iili.io/2msBTOb.jpg
The hacking group, Philippine Exodus Security has taken responsibility for the breach, claiming that PCSO’s security weaknesses allowed them to infiltrate multiple official email accounts. According to the attackers, they have already downloaded 100GB of sensitive data and remain inside PCSO’s email system, monitoring real-time communications.
https://iili.io/2msoOrB.jpg
The leaked database contains:
1. Every PCSO Lotto result from 2016 to 2025
2. Allegedly personal details of winners, including those who tried to remain anonymous
3. Unedited alleged winner photos that PCSO attempted to blur before publishing
4. Government-issued IDs (e.g., National ID, passports, driver’s licenses, UMID cards)
5. ZIP files, PNG images, PDFs, and videos
6. Confidential email conversations between PCSO officials
7. PCSO office addresses and internal communications
https://iili.io/2msokdP.jpg
The threat actors claim that at least five PCSO accounts were compromised, allowing them to intercept emails, attachments, and private messages. The group also revealed that PCSO requires winners to submit personal details before disclosing office locations, which means that anyone who has won a major prize may now have their private information exposed.
Our team has received sample of the leaked data, confirming its authenticity. Screenshots of stolen documents provided to show sensitive files such as:
1. Lottery ticket claims and contest entries
2. PCSO Games Club internal documents
3. Emails about contests such as "Bet on Your Best Buddy," "Super Pinay," and "Buhay Manggagawa"
4. Liquidation reports and financial documents
Our team has verified that the leaked files contain real personal data of Filipinos, posing a severe risk of identity theft, phishing scams, and financial fraud.
The hacking group claims they are still inside PCSO’s system, meaning ongoing leaks could happen if security measures are not immediately improved. While PCSO has released an official statement, cybersecurity experts warn that the failure to secure government email accounts could lead to widespread fraud and abuse.
https://iili.io/2p20tj4.jpg
Hackers often exploit weak passwords, outdated security protocols, and phishing tactics to gain access to sensitive systems. In PCSO’s case, the attackers claim to have breached multiple accounts, downloaded 100GB of data, and now have control over real-time email communications.
Deep Web Konek will continue monitoring the situation and updating the public on any further developments.
Update: February 14, 2025, The Philippine Charity Sweepstakes Office (PCSO) dismissed reports of a data breach on 14 February 2025, calling them “fake clickbait news.” PCSO General Manager Melquiades Robles clarified that no breach or hacking attempt took place, adding that no incidents were reported to the Department of Information and Communications Technology, according to PNA. Robles urged the public not to be misled by baseless claims meant to cast doubt on the integrity of PCSO games .
“Relax, today is Valentine’s Day, and don’t let it be ruined by some groups who are out to besmirch or cast doubt on the integrity of our games. It’s too early for April Fool’s Day, so let us not easily fall for it," Robles said.
![[Breach Alert] TechFactors Inc. Database Allegedly Leaked](https://iili.io/2DZnCfS.png)
