Tech

Vcs Reports over 9 Million Compromised Philippine Credentials in Q3

Quick Read

What Readers Should Know

VCS reports more than 9 million compromised credentials linked to Philippine users in Q3 2026. Its findings also record phishing, data breaches and ransomware incidents.

Key Takeaways

  • The reporting period covers July–September 2026.
  • VCS recorded over 9 million compromised credentials.
  • The report lists 83 data-breach incidents.
  • Ransomware incidents rose to 19 from five.
  • Credential counts do not equal unique affected people.

The company’s report also records phishing, data breaches and ransomware activity.

Viettel Cyber Security reported more than 9 million compromised credentials linked to Philippine users during the third quarter of 2026, highlighting the risks that exposed account information can create for organizations.

The company’s Cyber Threat Landscape Report covers July–September and records 10,913 phishing attacks, 83 data-breach incidents and 85.9 million exposed records.

These are different measurements. Credentials and records should not be interpreted as counts of unique people, and the figures should not be combined into a single victim total.

According to VCS, compromised credentials increased from 4.3 million in the same quarter of 2025. Its reported year-to-date total exceeded 28.3 million.

The company also recorded 19 ransomware incidents, compared with five a year earlier. Transportation and logistics had the highest number, followed by manufacturing, with other affected sectors including hospitality, financial services and healthcare.

VCS country manager Thomas Luu emphasized the risk of attackers using stolen account details to enter systems through apparently legitimate logins.

The report describes a market in information-stealing tools and exposed credentials that can support account takeovers, business email compromise and ransomware intrusions.

For organizations, VCS recommends stronger account protection, ongoing monitoring, timely software updates, backups and prepared incident-response processes. It also calls for attention to third-party risks and employee awareness.

The figures are findings reported by VCS rather than an official national census of every cyber incident. The supplied release does not establish how many unique individuals were affected.

Its central message is that account security and early detection deserve regular management attention before an incident disrupts operations.

Reader Questions

Frequently Asked Questions

Who produced the report?

Viettel Cyber Security.

How many phishing attacks were recorded?

10,913, according to VCS.

Does 9 million credentials mean 9 million people?

No. The release does not establish a unique-person count.

How many ransomware incidents were recorded?

Nineteen in Q3 2026.

What does VCS recommend?

Stronger account protection, monitoring, updates, backups and incident-response readiness.

About the Author

Introvert, wanderer, blogger, foodie, a hip-hop music writer, and one of the co-founders of a tech start-up company called GigsManila.