The local hacking group, Pinoy Lulzsec, is at it again. Fresh from defacing a couple of websites yesterday, the group compromised one of the popular fast food chains in the country and dumped their data online for public consumption.

Data of customers who availed of the delivery service of Wendy’s Philippines from 2013 to present are now downloadable online after Pinoy Lulzsec breached the company’s website and obtain their database earlier today. Based on our initial assessment, over fifty thousand customers were affected. Customers’ names, email addresses, phone numbers, and company/home addresses are all easily accessible in the dumped database. Passwords for their Wendy’s online account are also made available publicly.

Wendy’s website is currently down. The company’s IT team might’ve temporarily shut their online services down as they work on the backend. The company has yet to release a statement about the latest breach.

Companies who have been breached are required to report to the National Privacy Commission (NPC) about the incident. Wendy’s Philippines may have already coordinated with the agency about this incident. We’ll keep you posted should there be any updates regarding this matter.

For the meantime, if you’re one of those who have registered for an account with Wendy’s Philippines, you may want to change your email passwords especially if you used the same credentials when you have registered for an account.



As of May 2, 2018, NPC released an order (CIBN no. 18-058) in relation to Wendy’s data breach. A copy of the order can be found here:

Cidbn 18 058 Order May022018 Wendys Npc by Fjordan Allego on Scribd

Fjordan Allego
Follow me

Related Posts:

By Fjordan Allego

Fjordan Allego aka Fjordz is an IT security practitioner in the Philippines. He maintains a couple of blogs where he shares his views on various topics that he finds interesting. A self-confessed introvert who's mostly active in social media, Fjordz also loves to travel and explore the wonders of the world.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.