NPC-recorded cybersecurity incidents edge up to 345 in 2025

• Photo from Pixabay

Cybersecurity incidents recorded by the National Privacy Commission (NPC) increased slightly in 2025, with malicious attacks and human error accounting for most of the reported cases.

Citing NPC data, cybersecurity monitoring platform Deep Web Konek said the commission recorded 345 incidents in 2025, two more than the 343 incidents documented in 2024. This represents an increase of about 0.6 percent.

Malicious attacks were the leading cause, accounting for 149 incidents in 2025, followed by human error with 126 cases.

The NPC also recorded 41 incidents attributed to a combination of malicious attacks and human error, 11 involving system glitches and human error, eight involving malicious attacks and system glitches, and 10 caused solely by system glitches.

Photo courtesy of Deep Web Konek

While the year-on-year increase was minimal, the number of incidents in 2025 was about 88.5 percent higher than the 183 cases recorded in 2019. This means the annual total nearly doubled over the seven-year period, rather than within 2025 alone.

The data show that recorded incidents rose from 183 in 2019 to 232 in 2020 and 245 in 2021 before declining to 207 in 2022. The number then increased to 283 in 2023, 343 in 2024, and 345 in 2025.

The figures cover the general causes of cybersecurity incidents recorded by the NPC, including malicious attacks, human error, system glitches, and incidents involving combinations of these factors.

Deep Web Konek said the figures were based on official cybersecurity incident data from the NPC.

“While the released data does not identify specific organizations, it provides an official year-by-year statistical overview of cybersecurity incidents reported to the National Privacy Commission between 2019 and 2025. The aggregated figures offer insight into overall cybersecurity incident trends and their primary causes, providing one of the few official snapshots of the country’s reported cybersecurity landscape over the seven-year period,” said Deep Web Konek.