Alleged Data Sale of the Civil Service Commission (CSC) of the Philippines

⚠ Disclaimer

This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources.
The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes.

📌 Overview

On August 27, 2025, a threat actor using the alias 888 claimed responsibility for selling a leaked user database from the Civil Service Commission (CSC) of the Philippines. CSC serves as the central personnel agency of the Philippine government, responsible for the policies, plans, and programs concerning all civil service employees.

The compromised dataset allegedly contains 76,718 unique records, exposing detailed employee information, including role, enrollee ID, names, status, emails, sex, contact numbers, and organizational details.

📊 Key Details