NPC probes PhilHealth's possible violations after ransomware attackHackers have started exposing some of the data retrieved from ransomware attack against the Philippine Health Insurance Corp. after a ransom of $300,000 to unlock the data was not paid. MANILA, Philippines — The National Privacy Commission (NPC) said it is investigating the Philippine Health Insurance Corp. (PhilHealth) following a recent ransomware attack that exposed members' personal data. The NPC is looking into possible violations of data privacy laws and security concerns. Data stolen from PhilHealth through the Medusa ransomware attack was discovered to have been released online via platforms like Telegram on Thursday. Previously, PhilHealth acknowledged its inability to determine the exact number of records accessed during the Medusa ransomware attack.