What Happened
On June 19, 2020, the Pinoy Grayhats hacker group gained unauthorized access to the Career Center portal of the Technological Institute of the Philippines (TIP) at careercenter.tip.edu.ph.
TIP is one of the oldest technology-focused educational institutions in the Philippines, with campuses in Manila and Quezon City.
What Was Potentially Exposed
Career center portals typically contain:
- Alumni personal information and contact details
- Resumes and work histories
- Employer partner information
- Job application records
Why This Breach Stands Out
The irony of a technology institute being breached highlights that even institutions focused on IT education can have vulnerable web applications when security is not prioritized across all systems.
Lessons for Schools
- 1.Secure ancillary systems — career centers, alumni portals, and other non-core systems still contain sensitive data
- 2.Technology schools should lead by example — institutions teaching IT should demonstrate best security practices in their own infrastructure
- 3.Data minimization — career portals should only retain actively needed data and purge old records
Sources & References
- [1]GitHub Registry — Community-maintained registry of Philippine school hacking incidents (May-June 2020)