Deep Web Konek flags alleged 126GB NTC data breach

Cybersecurity monitoring group Deep Web Konek has flagged an alleged data breach involving the National Telecommunications Commission after a threat actor claimed to have stolen around 126 gigabytes of data from the agency.

In a report published Tuesday, July 14, Deep Web Konek said the claim was posted on a cybercrime forum by a threat actor identified as “DNH,” who is allegedly associated with the DeathNote Hackers group.

“A threat actor identified as DNH, associated with the DeathNote Hackers group, has claimed responsibility for an alleged data breach involving the National Telecommunications Commission (NTC). The claim was published on a cybercrime forum, where the actor alleged that data had been obtained from the agency’s official website,” said Deep Web Konek.

The threat actor claimed that approximately 126 GB (200,000) files were taken from the NTC’s official website and divided into several compressed archives.

According to Deep Web Konek, the alleged dataset contains PDF and Microsoft Word documents, SQL database files, JSON files, images, and executable or EXE files.

The files allegedly include names, email addresses, contact information, internal memoranda, account credentials, identification-related records, images, and other internal documents.

However, Deep Web Konek emphasized that the claims have not been independently verified. It remains unclear whether the threat actor obtained the reported volume of data or whether the files presented on the forum came directly from NTC systems.

The forum post did not appear to demand payment or threaten the agency with ransomware. Instead, the threat actor described the alleged operation as politically motivated.

The group linked its actions to criticism of the government’s handling of the deadly shooting at San Jose National High School in Tacloban City. The threat actor accused authorities of failing to act on alleged warning signs before the incident and presented the supposed data leak as retaliation against government institutions.

As of posting, the NTC has not publicly confirmed the reported breach or disclosed whether it is investigating possible unauthorized access to its systems.

“At the time of publication, the authenticity of the alleged dataset has not been independently verified, and the National Telecommunications Commission has not publicly confirmed the alleged breach,” said Deep Web Konek said.