Maxicare Philippines, Data Breach Allegedly, Exposes Personal And Booking Information

Maxicare Philippines is facing a potential data breach. The breached file, which is 33.3 MB in size, holds more than 22,000 rows of confidential data and is said to be up for sale to the initial three purchasers.

Image By: Deep Web Konek

The breach, orchestrated by a threat actor under the alias “OPCODE-90,” has led to the illicit extraction of verified data.

What Sensitive Personal Details Does The Breach Exposed?

The security breach exposed susceptible personal and booking information. This includes the sender’s first name, middle name, last name, company, unit/vendor, Go Rewards code, and email.

The breach has also compromised member details, revealing their first name, middle name, last name, 16-digit Maxicare card number, company name, account type, date of birth, sex, email address, mobile numbers, corp code, remarks, and VIP status information.

The member booking details have also been compromised, exposing information such as the country, ZIP code, province, barangay, street, village/subdivision, city, preferred dates and times, landmark, and comprehensive list of requested procedures.

This breach has undoubtedly put individuals’ privacy and security at risk, highlighting the importance of robust security measures to safeguard personal information.

Email Sent From Maxicare

Image By: Deep Web Konek

Maxicare informed its members about a data breach on June 13, 2024, through a notification issued on June 16, 2024. The breach involved unauthorized access to personal data submitted to Lab@Home, a third-party provider for home laboratory requests. Despite Lab@Home having a separate database from Maxicare, the breach has affected Maxicare members.

In response to the breach, Maxicare actively reduces potential risks and ensures its members are updated on the situation.

Lists Of Companies Allegedly Affected By The Data Breach

There are more than a thousand companies that have been affected; here are some of them (In Alphabetical Order):

1. ABS-CBN CORPORATION
2. ACCENTURE, INC.
3. ACER PHILIPPINES INC.
4. ACQUIRE ASIA PACIFIC PHILIPPINES INC.
5. AFNI PHILIPPINES INC.
6. AIA PHILIPPINES LIFE AND GENERAL INSURANCE COMPANY INC.
7. ALLIANZ PNB LIFE INSURANCE INC.
8. ATLASSIAN PHILIPPINES, INC.
9. BAYER BUSINESS SERVICES PHILIPPINES INC.
10. BPI AIA LIFE ASSURANCE CORPORATION (FORMERLY BPI PHILAM LIFE ASSURANCE CORP BPLAC)
11. CANVA SOLUTIONS INC.
12. CEBU AIR, INC.
13. CONCENTRIX CVG PHILIPPINES, INC.
14. DXC TECHNOLOGY (PHILIPPINES), INC.
15. DYSON ELECTRONICS PTE. LTD. PHILIPPINE BRANCH
16. EQUICOM SERVICES, INC.
17. ERICSSON TELECOMMUNICATIONS INC.
18. GLOBAL PAYMENTS PROCESS CENTRE INC.
19. GOC (GOOGLE OPERATIONS CENTER) PHILIPPINES, INC.
20. HITACHI SOLUTIONS PHILIPPINES CORPORATION
21. HYUNDAI ASIA RESOURCES INC.
22. IPAY88 PHILIPPINES, INC.
23. JOHNSON JOHNSON INTERNATIONAL SINGAPORE PTE LTD.
24. LG ELECTRONICS PHILIPPINES INC.
25. MANULIFE DATA SERVICES, INC.
26. MERCURY GROUP OF COMPANIES
27. NESTLE PHILIPPINES INC.
28. OPTUM GLOBAL SOLUTIONS (PHILIPPINES) INC.
29. ORACLE NETSUITE (PHILIPPINES) CORPORATION
30. PAYPAL PHILIPPINES, INC.
31. PFIZER INC.
32. PHILIPPINE DENTAL ASSOCIATION, INC.
33. SAFEWAY PHILTECH INC.
34. SAMSUNG SDS GLOBAL SCL PHILIPPINES CO. LTD INC.
35. SECURE VISA CONSULTING, INC.
36. SITEL PHILIPPINES CORPORATION
37. SODEXO BENEFITS AND REWARDS SERVICES PHILIPPINES, INC.
38. STARTEK PHILIPPINES, INC.
39. SUN LIFE FINANCIAL ASIA SERVICES LIMITED
40. SUN LIFE OF CANADA PHILS. INC.
41. SYKES ASIA INC.
42. TELSTRA GROUP OF COMPANIES
43. THE GOVERNMENT OF CANADA (FORMERLY EMBASSY OF CANADA)
44. TOYOTA FINANCIAL SERVICES PHILIPPINES CORPORATION
45. TRANSCOM WORLDWIDE (PHILIPPINES) INC.
46. TRUSTWAVE PHILIPPINES, INC.
47. UBER PHILIPPINES CENTRE OF EXCELLENCE LLC
48. Unilever Philippines Inc.
49. VILLAR GROUP OF COMPANIES
50. VMWARE PHILIPPINES INC.
51. WELLS FARGO INTERNATIONAL SOLUTIONS LLC
52. WYETH PHILIPPINES INC
53. YAMAHA MOTOR PHILIPPINES, INC.
54. ZENDESK INCORPORATED
55. ZTE PHILIPPINES INC.

Data Privacy Advisory

Image By: Maxicare Healthcare Corporation

On June 18, 2024, Maxicare issued a data privacy advisory to ensure no sensitive medical information was leaked and exposed.

This is just a reminder to be careful with what company you affiliate yourself with and share your data with. Companies must take measures to ensure data safety, especially nowadays, when rampant data breaches are common.

source https://freeduhm.com/maxicare-philippines-breach-allegedly-exposes-data/