Threat Intelligence Brief
Curated summary with source attribution
Source: astig.ph
Threat Risk: High
Victim: Land Transportation Franchising and Regulatory Board (LTFRB)
Incident: Data breach of the LTFRB Electronic Support System (LESS).
Impact: Potential exposure of sensitive personnel, vehicle registration, and operator records for millions of citizens.
Attacker: core849 and Quantum Security Group
Analysis: The Land Transportation Franchising and Regulatory Board (LTFRB) confirmed a security breach affecting its Electronic Support System (LESS). External reports link the incident to threat actors ‘core849’ and ‘Quantum Security Group,’ who claim to have exfiltrated gigabytes of sensitive personnel and vehicle registration data. The agency has suspended all online transactions to investigate the extent of the exposure.
Recommendations: Implement multi-factor authentication (MFA) for all administrative access to government databases; Conduct immediate security audits of public-facing analytics tools and API endpoints; Enforce strict data minimization policies to reduce the volume of sensitive records stored in online environments
Source: ASTIG: Philippine News & Reviews
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-09-19 22:07 UTC
Unauthorized access to the electronic support system (LESS) and internal database. Temporary suspension of all online applications and transactions for PUV operators and motorists. The LTFRB’s LESS platform was targeted, forcing a complete system suspension to prevent further unauthorized access. The involvement of multiple national cybersecurity agencies indicates a coordinated effort to assess the extent of the compromise.
Corroborating source: newsinfo.inquirer.net
Update — 2026-09-20 07:52 UTC
Data breach of the electronic support system (LESS) and internal databases. Service disruption for online applications and potential exposure of sensitive motorist and operator data. The Land Transportation Franchising and Regulatory Board (LTFRB) suffered a breach affecting its electronic support system (LESS) and internal databases. This compromise impacted the infrastructure used for processing online applications for motorists and public utility vehicle operators. The agency has proactively suspended all related digital services to contain the incident and prevent further exposure.
Corroborating source: laoag.bomboradyo.com
Update — 2026-09-21 10:07 UTC
Data breach affecting the Electronic Support System (LESS). Suspension of online services and potential compromise of sensitive database records. An unauthorized breach occurred within the LTFRB’s Electronic Support System (LESS) on September 13. The agency has suspended all related digital transactions to prevent further exposure while coordinating with national cyber agencies. The full extent of the data exfiltration is currently under technical validation.
Corroborating source: tribune.net.ph