By Kris Crismundo/PNA
MANILA — Privacy Commissioner Raymund Liboro said on Saturday the National Privacy Commission (NPC) is now investigating the data breach at Cebuana Lhuillier, where the personal data of more than 900,000 clients may have been compromised.
Liboro said representatives from Cebuana Lhuillier went to the NPC on Friday to report the data breach involving their e-mail server and sought the agency’s assistance regarding the issue.
“Cebuana Lhuillier informed us that it has engaged the services (of) a third party information security services provider to handle their mitigation and response to this incident,” Liboro said in a text message to reporters.
He added that Cebuana Lhuillier will submit a more detailed report regarding the data breach.
“Cebuana Lhuillier has 72 hours from discovery of a data breach to report the same to the Commission and affected data subjects. The data subject notification must be done individually and not further expose the data or subject (it) to more harm,” the NPC chief noted.
