PAGCOR checks alleged online disclosure of restricted-person information

PAGCOR issued a public advisory on 11 November 2026 about an online posting allegedly containing information associated with its National Database of Restricted Persons (NDRP).

Its Computer Emergency Response Team, PAGCOR-CERT, is verifying the authenticity, source and extent of the alleged disclosure, including whether it relates to a previously reported incident.

PAGCOR said there was no verified evidence linking the posting to a new unauthorised intrusion into its systems, and its assessment remained ongoing.

As a precaution, the regulator advised the public to remain vigilant against phishing, identity theft and other fraudulent activities, and avoid accessing or sharing associated files.

PAGCOR said it remained committed to safeguarding personal information and coordinating with relevant government authorities as appropriate.

The advisory directed people with privacy-related concerns to PAGCOR's Data Privacy Office and said further updates would come through official PAGCOR channels as warranted.

The distinction between an alleged disclosure and a verified new intrusion matters for customer communications: the advisory establishes an investigation, not confirmation of a fresh breach.