Threat Intelligence Brief
Curated summary with source attribution
Source: newsinfo.inquirer.net
Threat Risk: Medium
Victim: Baguio City Government
Incident: Alleged ransomware attack and data exfiltration targeting the BUILDPass online system.
Impact: Potential exposure of personal identification, building permits, and government financial records.
Attacker: Emperador ransomware group
Analysis: The Emperador ransomware group claims to have exfiltrated 2.9GB of sensitive government and personal data from Baguio City’s BUILDPass system. While the city has not fully confirmed the theft, the suspension of the service confirms a significant security incident. This event underscores the ongoing risk to municipal digital infrastructure from targeted ransomware actors.
Recommendations: Implement multi-factor authentication (MFA) across all administrative and public portals; Establish immutable backups for critical municipal data to mitigate ransomware leverage; Conduct regular penetration testing on public-facing government applications
Source: Inquirer.net
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-08-16 02:06 UTC
Ransomware attack targeting the BUILDPass system. Loss of system availability and potential exposure of 2.9GB of government and personal data. The incident involved a ransomware attack on the BUILDPass system, resulting in approximately 2.9GB of data being compromised. The Baguio City Government has acknowledged the breach by taking the affected services offline. This event highlights the ongoing risk to municipal digital infrastructure and the critical need for transparent incident response.
Corroborating source: journal.com.ph