Inside job a probability in recent hacking of bank accounts, says BSP

BSP Gov. Benjamin Diokno. INQUIRER file photo

MANILA, Philippines — Recent bank hacking incidents in the country may be a case of inside job, Bangko Sentral ng Pilipinas (BSP) Governor Benjamin Diokno said on Tuesday.

BSP earlier said that they are coordinating with the affected banks, BDO Unibank and Union Bank of the Philippines, to take remedial measures following the hacking incident.

“I’m sure may kasabwat ‘yan sa loob kasi given the extent of hacking, marami kasing kaso na sabay-sabay ‘di ba? So, sa palagay ko, mayroong inside [job],” Diokno said on Teleradyo’s Kabayan.

(I’m sure there is an employee involved because given the extent of hacking, there are many cases and it all came at the same time, right? So, I think there’s an inside job.)

“Pero (But) we leave it to the two banks to investigate at kami rin nag-iimbestiga (and we are also investigating),” he added.

Diokno noted that the hacking incidents happened while the banks were transitioning into a new system.

“They have to invest in a better technology. In fact, kaya nga siguro sila napasukan dito ay nasa transition sila. They’re going to transition into a better system,” he explained.

(In fact, they may have been attacked because they are transitioning.)

“Usually ganyan ang nangyayari pagka ’yung nagta-transition ka from the old system to the new system, mayroong somebody from the inside na titignan ‘yung weaknesses ng sistema, nasisingitan sila,” the governor continued.

(Usually, that is what happens when transitioning from the old system to the new system, there is somebody from the inside who will look at the system’s weaknesses.)

Diokno advised the public to practice cyber-hygiene by changing their passwords regularly.

“On the part of the client, siguro ‘yung advice na dapat siguro palitan mo ‘yung password. Hindi naman pwedeng password mo, 10 years na hindi mo ginagalaw. Dapat talaga periodically papalitan mo ‘yung password. Ang tawag diyan cyber-hygiene,” the governor recommended.

(On the part of the client, I advise them to change their passwords. You cannot have the same password for 10 years. You should periodically change your password. That is what you call cyber-hygiene.)

He also told individuals victimized by the hacking incidents to immediately call their respective banks and report the matter.

“Well, unang-una (first), call the attention of the bank at kung hindi ka naman pinapansin ng bangko (and when they do not respond to you), you can always call Bangko Sentral,” Diokno said.

RELATED STORIES:

Don’t blame victims of hacking, National Privacy Commission chief tells banks 

Bank clients lose over P1 billion to cybercrime 

Amid rising cyber-attacks, Dominguez urges shared defense systems among gov’t agencies 

JPV