Why this happens

Cloud account credentials are commonly compromised through phishing, password reuse on breached sites, and SIM swap attacks. Two factor authentication via SMS provides only partial protection against modern attackers.

Once inside, attackers commonly download the full photo library before exiting. The original account compromise may have occurred weeks before the content surfaces online.

Legal framework in Philippines

Republic Act No. 9995, Anti-Photo and Video Voyeurism Act of 2009. Imprisonment from 3 to 7 years and fine from PHP 100,000 to 500,000.

The Philippines was an early adopter with RA 9995 in 2009 covering capture, copying, sale, distribution, publication, and broadcast of intimate visual content without consent. The Data Privacy Act provides parallel civil rights to erasure or blocking.

Evidence to preserve

Do not: Do not change passwords before the access logs are preserved. Account log retention is limited and changing the password may trigger log rotation that erases the intrusion evidence.

Five step removal process

  1. 1

    Preserve all evidence first

    Cloud account access logs showing the unauthorized access dates and IP addresses. The full list of devices and locations that have accessed the account.

  2. 2

    File the Anti-Photo and Video Voyeurism Act of 2009 (RA 9995) criminal complaint

    Report to local police or the national cybercrime unit. PNP Anti-Cybercrime Group can assist.

  3. 3

    Submit an erasure request under Data Privacy Act of 2012 (RA 10173) right to erasure or blocking under section 16

    Each major platform has a designated data protection contact. The request must cite the legal basis and identify the URLs. The platform has 30 days to respond. NPC accepts complaints for non compliance.

  4. 4

    Run a biometric scan to find every additional copy

    Content posted to one platform is rarely confined to one platform. ScanErase identifies every current hosting location in a single scan, including mirror copies and AI generated variants.

  5. 5

    File TAKE IT DOWN Act notices for covered platforms

    Use your scan report to file the federal 48 hour notice yourself, in parallel with your domestic rights. The two regimes are cumulative, not exclusive.

Statutory citations to include in your complaint

Frequently asked questions

Is cloud account hack a crime in Philippines?

Yes. Republic Act No. 9995, Anti-Photo and Video Voyeurism Act of 2009 criminalises this conduct. Imprisonment from 3 to 7 years and fine from PHP 100,000 to 500,000.

What evidence should a Philippines victim of cloud account hack preserve?

Cloud account access logs showing the unauthorized access dates and IP addresses. The full list of devices and locations that have accessed the account. Any password change notifications, recovery emails, or security alerts received. Full page screenshot of every URL where the leaked content has appeared.

Does Data Privacy Act of 2012 (RA 10173) right to erasure or blocking under section 16 apply to this scenario?

Yes. Data Privacy Act of 2012 (RA 10173) right to erasure or blocking under section 16 gives the victim a direct erasure right against any platform processing the imagery. NPC enforces non compliance.

What support is available in Philippines for cloud account hack?

PNP Anti-Cybercrime Group provides direct support to victims and can assist with both the criminal complaint and the platform removal process. Contact at https://acg.pnp.gov.ph.

Can a Philippines victim also file a US TAKE IT DOWN Act notice?

Yes when the hosting platform is subject to US jurisdiction. The 48 hour federal removal obligation runs in parallel with rights under Anti-Photo and Video Voyeurism Act of 2009 (RA 9995) and Data Privacy Act of 2012 (RA 10173) right to erasure or blocking under section 16.