THE Philippines recorded over 52 million exposed credentials in just three months as cyber attacks surged 49 percent during the third quarter of 2025, with artificial intelligence (AI) and deepfake technology enabling a new generation of digital threats that are faster, more deceptive, and harder to detect than ever before.
Viettel Cyber Security documented 76 data breach incidents between July and September, up from 51 cases in the previous quarter, according to its third quarter Cyber Threat Landscape Report on the Philippines.
The breaches compromised 4.3 million accounts, a 73-percent increase from the 2.5 million affected in the second quarter.
According to the report, cybercriminals now deploy AI-generated videos, cloned voices, and fabricated executive communications to deceive employees and business partners.
Combined with AI-assisted malware that adapts to evade detection, these technologies have industrialized deception at scale.
‘Cybersecurity isn’t about fear, it’s about foresight,’ said Thomas Luu, Country Manager at Viettel Cyber Security. ‘As the Philippines accelerates towards digitalization faster than ever, the importance of security must not be overlooked.’
The quarter recorded 7,656 phishing attacks, with 31 percent targeting banking and finance. Researchers also identified 27 new vulnerabilities in commonly used workplace platforms.
The report also noted that healthcare has emerged as the top target for cybercriminals, driven by the growing value of patient data and hospitals’ reliance on digital systems. Medical facilities face ransomware attacks capable of crippling operations and exposing sensitive information.
Finance and e-commerce continue suffering from phishing schemes and credential theft, while manufacturing, energy, and public services remain exposed to ransomware and supply-chain compromises.
‘Organizations who innovate without the necessary protection in place become vulnerable to risks. Cybersecurity isn’t just a safeguard-it’s an enabler of sustainable digital growth,’ Luu said.
With data leaks, ordinary Filipinos are finding their data repurposed for fake job listings, e-commerce scams, and fraudulent loan applications, according to the report.
Those who reuse passwords across accounts face particular vulnerability, while small businesses receive phishing invoices disguised as legitimate supplier communications.
Luu recommended a ‘four-pronged’ defense strategy: regular software patching, offline data backups with disaster recovery procedures, continuous employee training, and round-the-clock threat monitoring through managed Security Operations Center (SOC) services.
‘Cybersecurity has become a marker of leadership and trust, especially in an increasingly digital economy,’ he said. ‘At Viettel Cyber Security, we partner with organizations to build resilience through managed SOC services. Our SOC empowers businesses to enhance operational efficiency and security management, helping them overcome workforce constraints while ensuring 24/7 protection against evolving cyber threats.’