Two Bohol Schools and Municipal Government

What Happened

In August 2013, hackers breached and defaced the websites of two schools and a municipal government in Bohol province. This incident is notable as one of the earliest documented cyberattacks specifically targeting Philippine educational institutions.

Context

The attack occurred during a period of intense hacktivist activity in the Philippines. In 2013, multiple waves of website defacements hit Philippine government and institutional websites:

• March 2013 — Anonymous Philippines defaced the Philippine President's website and other government sites
• Early 2013 — Philippine and Malaysian hackers traded website defacements over the Sabah territorial dispute
• August 2013 — Pinoy Vendetta hackers targeted government and school websites, including uploading proxy scripts to La Consolacion University Philippines
• October 2013 — Following the devastating Bohol earthquake, hacktivists defaced sites to draw attention to relief efforts

What Was Compromised

As a website defacement attack, the primary impact was the alteration of the public-facing websites. The extent of any data access or exfiltration behind the defacement is unknown. In 2013, many Philippine school websites had minimal security measures and often ran on unpatched CMS platforms.

Why This Breach Matters

• Earliest documented school cyberattack — this is among the oldest known incidents of Philippine school websites being targeted by hackers
• Precursor to larger waves — the 2013 attacks foreshadowed the massive wave of school website hackings that would occur in 2020 during the pandemic
• Provincial targets — even schools outside Metro Manila were targeted, demonstrating that geographic remoteness does not equal safety
• Hacktivist era — the incident occurred during a peak period of Philippine hacktivism, when groups like Anonymous Philippines and Pinoy Vendetta were actively targeting institutions

Lessons for Schools

1. 1.Website security is not optional — even in 2013, having a public website meant being a potential target
2. 2.Keep CMS platforms updated — many defacements in this era exploited known vulnerabilities in WordPress, Joomla, and other content management systems
3. 3.Monitor your website — schools should have monitoring in place to detect unauthorized changes to their sites
4. 4.Backups enable recovery — regular backups allow quick restoration after a defacement attack