core849 2026 activity
Unattributed group. 3 reports in 1 country: 1 confirmed, 2 claimed or disputed. Latest 5 Nov 2026.
Philippines🎯 What sources say
- Philippines: Forum user tied to the LTFRB, DICT D-TAP and DICT internal-file claims between September and November. Astig.ph Radar PH
🚨 Reports
| Organisation | Country | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|---|
 ⚠️ ClaimedDepartment of Information and Communications Technology (DICT) internal filesFull story | Philippines | 5 Nov 2026 | Government | Data leak | core849 | Claimed. A forum user claimed about 3.6 GB of internal DICT documents, including procurement and budget records. Bilyonaryo News Channel, citing a source, reports the intrusion hit DocTracks, the internal document-routing system; DICT has not commented. | Philstar Tech · Radar PH · Bilyonaryo News Channel✓ 8 Nov |
| ⚠️ ClaimedDICT Trusted Assessment Provider (D-TAP) filesVia a vendor | Philippines | 24 Sep 2026 | Government | Data leak | core849 | Claimed. core849 claimed 410 files tied to 48 accredited cybersecurity firms; DICT said on 25 September that NCERT was verifying a possible exposure involving a D-TAP provider. | Astig.ph✓ 7 Nov |
 ✅ ConfirmedLand Transportation Franchising and Regulatory Board (LTFRB) | Philippines | 19 Sep 2026 | Transport | Data leak | core849 | Confirmed. The LTFRB confirmed a data breach in a public advisory and took its LTFRB Electronic Support System offline. Claimed. A user called core849 claimed 7.7 GB of personnel, vehicle registration and franchise records. | Newsbytes.PH✓ 7 Nov |
Leak-site listings are claims until the organisation or authorities confirm them. Methodology