PH 5th most targeted by Chinese state-backed hackers

MANILA, Philippines — The Philippines ranked fifth among countries targeted by Chinese state-sponsored cyber actors, accounting for 2% of their observed global targeting, according to the Microsoft Digital Defense Report 2026.

The report identified the Philippines as a significant target in the global cyberthreat landscape, highlighting the country’s exposure to cyber operations linked to geopolitical interests and intelligence gathering.

Drawing on Microsoft Threat Intelligence telemetry covering malicious activity observed across its global customer base from July 2025 to June 2026, the report examined the scale and distribution of cyberthreats across countries and regions.

The Philippines ranked 12th worldwide among countries where customers were most frequently affected by cyberthreats, accounting for 1.5% of reported global customer impact.

It also ranked eighth in the Asia-Pacific region in terms of distinct state-sponsored or geopolitical cyber campaigns, with 14 recorded threat events.

READ: PNP on alert for possible cyber threats ahead of Sona 2026

Microsoft identified Southeast Asia as an important area of cyber risk as rapid digitalization expands the number of systems and services that need protection.

State-sponsored cyber operations typically involve attempts to gain unauthorized access to government systems, steal sensitive information or maintain covert access to networks for intelligence gathering.

For Dr. Alicor Panao, an Inquirer data scientist and associate professor at the University of the Philippines, government agencies and information technology companies are particularly attractive targets because of the sensitive information they hold and the digital infrastructure they operate.

Apart from Chinese state-sponsored cyber actors, the Philippines is also among the countries targeted by North Korean state-sponsored hackers, ranking 10th globally and accounting for 1% of their observed targeting.

READ: House approves bill to protect Filipinos, key services from cyberattacks

For the Philippines, “this means that alongside defending itself from ransomware attacks that can disrupt operations and hold data hostage, it must contend as well with state-sponsored hacking aimed at stealing sensitive information and gathering intelligence,” Panao said.

However, he said blanket bans are not the answer, even if they are a typical bureaucratic knee-jerk reaction to complex problems.

“Microsoft’s recommendations point instead to stronger security measures, timely incident reporting, and closer cooperation between government and industry,” he said.

Panao added that, essentially, “what the findings suggest is for the Philippines to draw evidence-based policies, make sustained investment in cybersecurity, and improve its capacity to prevent attacks, detect intrusions, and recover when defenses fail.” /dm