Press Statement on Alleged Data Breach Involving Toyota, Robinsons, and S&R

In light of recent concerns regarding reported data breaches, the National Privacy Commission wishes to provide updates on the recent data breach notifications we have received from various personal information controllers.

Robinsons Land notified us of a data breach on June 1, 2024. Additionally, Toyota notified us of a breach on May 14, 2024. The reports are currently under evaluation.

The Philippine National Police (PNP) has also reported six data breach notifications in May 2024. As of 7:25 AM today, there is no official notification of any data breach involving S&R.

Companies and individuals processing personal data must notify affected data subjects individually and report to the Commission via the Data Breach Notification Management System (DBNMS) within 72 hours of discovering a breach.

The NPC takes all allegations of data breaches very seriously and is actively monitoring the situation to ensure the security and privacy of all concerned data subjects. We encourage data subjects who believe they may be part of any breach to contact the data protection officers of the respective companies and report the same to the NPC.

We remain committed to safeguarding data and ensuring compliance with all relevant data protection regulations. Our Compliance and Monitoring Division is working tirelessly to address any breaches promptly and effectively.

For further inquiries, please contact our office at [email protected].

ATTY. RAINIER ANTHONY M. MILANES

Chief, Compliance and Monitoring Division

###