phishing

MANILA, Philippines  – Cyber attacks are increasingly disrupting digital systems across the Philippines, forcing organizations to rethink how they prepare for outages and data loss. As threats such as ransomware, phishing and AI-enabled fraud grow more sophisticated, prevention alone is no longer enough.

In the third quarter of 2025 alone, cyber attacks surged 49% from the previous quarter, with 76 breach incidents compromising more than 4 million accounts, according to a cybersecurity report. At the same time, the World Economic Forum warned in its Global Cybersecurity Outlook 2026 that AI-enabled fraud is emerging as a top risk, as generative AI tools make scams more convincing and easier to scale.

For organizations that rely heavily on digital systems, including BPOs, retail, logistics, healthcare and financial services, even brief outages can result in revenue loss and reputational damage.

At the CyberSecPhil Conference 2026, Synology, a global leader in network-attached storage and data management solutions, said organizations should treat data protection as an organizational priority, not just an IT concern, and rethink strategies beyond traditional backups.

“With digital operations now central to day-to-day business, the ability to recover data and systems quickly is becoming critical during cyber incidents,” said Claire Huang, Synology’s Country Manager for the Philippines.

Moving beyond traditional backups

Traditional backup strategies are no longer sufficient, as attackers now target not only primary systems but also backup and recovery environments.

“Effective data protection is no longer just about keeping copies of data,” Huang said. “It must ensure that data remains secure and immutable, and that systems can be restored quickly even if primary environments are compromised.”

Many organizations continue to face gaps in their data protection strategies, including weak access controls and limited visibility across systems. In some cases, backup environments remain connected to production networks, leaving them exposed during ransomware attacks designed to disrupt operations, not just steal data. This can lead to halted services and costly recovery efforts.

Data exposure may also have regulatory implications. Under the Data Privacy Act, organizations are required to implement reasonable and appropriate safeguards to protect personal information, including measures to ensure personal data remains available and protected after a security incident.

Building resilience into data protection

In response to mounting operational risks, organizations are exploring more structured data protection strategies that improve recovery without adding unnecessary complexity. As IT environments grow more complex and distributed, fragmented protection tools and manual recovery processes can make incident response slower and less predictable during cyber incidents.

Solutions built around centralized management, protection of critical workloads and recovery readiness are playing a growing role in supporting operational continuity.

Developed with these priorities in mind, Synology’s ActiveProtect solution is designed to help organizations centralize oversight, safeguard essential systems, and enable reliable recovery when attacks occur.

“As cyber threats evolve, resilience is now a core part of security strategy,” Huang said. “Organizations need coordinated data protection and tested recovery processes to reduce disruption and protect critical operations.”

Through discussions with industry leaders at the CyberSecPhil Conference 2026, Synology reaffirmed its commitment to supporting organizations with future-ready data protection solutions as resilience becomes central to operational risk management.