Skip to content

Baguio City Government Files Released Free With Permits, Titles and ID Cards

Breach Report Philippines Local Government Released Free

Baguio City Government Files Released Free With Permits, Titles and ID Cards

A forum actor posting as NOTORIOUS has published 3.23 GB of material attributed to the City Government of Baguio in the Philippines, released free rather than sold. The two proof samples point at construction and building control records: a completed unified building permit application, an issued building permit naming the owner, the property title number, the construction address, the occupancy classification and the total project cost, and a Professional Regulation Commission identity card carrying a photograph, full name and licence number. No record count, file list or intrusion method is given. The claim is unverified.

Size3.23 GB
RecordsNot stated
DistributionFree
ActorNOTORIOUS

Post details

TargetCity Government of Baguio
CountryPhilippines
SectorLocal government
ListingFree download
Volume3.23 GB
Stated sourceNot described
Observed
ActorNOTORIOUS

!What the post claims

  • 3.23 GB released free
  • City government records
  • Building permit applications
  • Issued building permits
  • Professional licence cards
  • Photographs on licence cards
  • Licence registration numbers
  • Applicant and owner names
  • Property title numbers
  • Construction addresses
  • Barangay and postal codes
  • Occupancy classification
  • Scope of work
  • Total project costs
  • Supervising professionals named
  • Official receipt references
  • Signatures and official stamps
  • No record count given

Screenshot

Forum post publishing City Government of Baguio files, observed 27 August 2026.

Mapped techniques

The post describes no intrusion method. All entries are inferred from the artefacts, not stated.

  • Collection T1213 Data from information repositories Inferred The proof material spans applications, issued permits and supporting identity documents, which sit together in a permitting system rather than in any one public record.
  • Collection T1530 Data from cloud storage Inferred Several gigabytes of scanned forms and identity cards indicate a document store was reached, not only a database.
  • Exfiltration T1567 Exfiltration over web service Inferred Distribution runs through an external file host linked from the post. The route out of the environment is not described.

Potential impact

Permit files are unusual because they bundle three separate things into one folder: a scanned identity document for the professional, a named property with its title number and address, and a stated project value. That combination supports impersonation of licensed professionals, whose signature carries legal weight on construction approvals, and it produces a ready made list of high value properties with owners' names attached. For the individuals in it the exposure is permanent, since a licence card and a land title reference cannot be reissued to undo the disclosure.

iStatus Unverified

The evidence offered is two documents and a size figure, with no record count, no file listing and no account of how the material was obtained. The account is recent and carries no standing, and the release is free, so nothing about the posting itself supports the claim. Dark Web Informer has not retrieved the files and is not linking them. The city government has not publicly addressed the claim.

Dark Web Informer // Threat Intelligence

Latest