The most technologically advanced nations have seen their top-security government websites hacked and sensitive data leaked. At the US Federal Reserve in New York, hackers did not leak data but stole nearly $100 million from the account of the Bangladesh central bank, and then laundered $81 million of the funds through Philippine casinos and the banking system.
It is therefore not surprising that a 23-year-old man has been arrested and reportedly admitting hacking the website of the Commission on Elections a few weeks ago. Paul Biteng, a fresh graduate of information technology, said he did it to show the vulnerability of the Comelec website as the general elections approach.
The website, however, was not just hacked; biometric data and other personal details about voters were also released for easy access by identity thieves and other crooks. Among the most vulnerable are overseas Filipino workers, whose Comelec records may include their passport numbers.
For this security breach and what the Commission on Human Rights is considering as a possible violation of privacy, those responsible must not receive a mere slap on the wrist. Republic Act 10175 or the Cybercrime Prevention Act, passed in 2012, gives authorities the tools to go after hackers, with appropriate punishment specified for offenders.
The encouraging aspect in what has been dubbed as the “Comeleak” case is the fact that the principal suspect has been apprehended by the National Bureau of Investigation. Still, the case should lead to a review of existing laws and measures to prevent a similar incident.
Already the leak has made the Bangko Sentral ng Pilipinas advise all banks to institute measures to prevent the compromised Comelec data from being used for illegal activities through the banking system. Even if the “Comeleak” website was taken down the other day, crooks could have already obtained useful data for their illegal activities. Authorities must send a strong message that such offenses will be met with the full force of the law.