Philippine lawmakers grill health agency executive over breach affecting 42 million people

PhilHealth, the Philippines’ national health insurer, was hit by a Medusa ransomware attack in September 2023 that led to the theft of about 430 GB of data affecting roughly 42,089,693 individuals. The organization initially denied that personal and medical data were compromised, later confirmed theft of 8.5M senior citizens’ records, has faced criticism for not notifying victims as required, and launched a portal for people to check if their identifiers were exposed.