Philippines
Government / Education
Free Download
DepEd Schools Division of Iloilo Allegedly Breached, Records on Staff, Students and Families With Fingerprint Templates Leaked
An actor posting as citizengod has published what they describe as the database and source code of the Schools Division of Iloilo, the local office of the Philippines' Department of Education, which administers schooling from kindergarten to senior high school. The inventory lists roughly 1.06 million name rows covering staff, students, and family members, alongside government identity numbers, dates of birth, home addresses, family relationships, blood types, salary grades, and 780,000 attendance records. It also claims 4,739 biometric records including fingerprint template data and 15,025 password hashes in an obsolete format. The claim is unverified.
▣Post details
Philippines!Allegedly included
- Fingerprint templates
- Names of staff & students
- Family member names
- Dates of birth
- Residential addresses
- Tax & pension numbers
- Social security identifiers
- Professional licence numbers
- Blood type, height, weight
- Religion & civil status
- Parent, spouse, child records
- Password hashes
- Login activity logs
- Salary grades & work history
- Attendance records
- Source code
◱Screenshot
⚠Potential impact
The fingerprint templates are the gravest element. Biometrics cannot be reissued, so a person whose template is published is exposed permanently, with no remediation available at any point in their life. Second is the presence of students and their family members: a schools division database ties named children to birth dates, home addresses, and parents. The government identity numbers covering tax, pension, social security, health insurance, and professional licensing form a complete Philippine identity package for staff, while blood type and physical characteristics add health-adjacent data. Password hashing is described in a format that is trivially crackable, so reused credentials should be assumed compromised.
iStatus
UnverifiedEvidence consists of a category-by-category inventory with counts and a server configuration dump, rather than record samples, so individual records cannot be assessed. Dark Web Informer is not reproducing the server identifiers, addresses, or software details, which describe a live government system. The account is newly created with no standing. Nothing has been independently corroborated. The claim is unverified and the Department of Education has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
