LSN News › Philippines

Technology · Philippines Bureau

St. Luke's Medical Center faces privacy scrutiny over data breach

The National Privacy Commission has begun reviewing a data breach notification from St. Luke's Medical Center involving a cybersecurity incident that may have exposed personal information of patients and employees.

LSN Philippines · 3 November 2026

St. Luke's Medical Center faces privacy scrutiny over data breach

MANILA — The National Privacy Commission (NPC) is examining a data breach notification submitted by St. Luke's Medical Center (SLMC) following a cybersecurity incident, according to an announcement made Tuesday.

The hospital chain alerted the NPC about a potential compromise of personal information affecting both patients and staff members. Deputy Privacy Commissioner Jose Belarmino II, serving as NPC spokesperson, indicated the commission is conducting a formal review of the incident details provided by SLMC.

The nature and scope of the compromised data, as well as the number of individuals affected, have not been disclosed. The review will determine whether SLMC adequately complied with data protection protocols and notification requirements under Philippine privacy laws.

The incident underscores ongoing cybersecurity vulnerabilities within the Philippines' healthcare sector. Healthcare facilities remain attractive targets for cyberattacks due to the sensitivity of personal and medical information stored in their systems.

St. Luke's Medical Center has not issued a public statement regarding the breach. The NPC's review findings may lead to regulatory action or recommendations for enhanced security measures across the institution.