Cebuana Lhuillier, a Philippine financial service provider, said on Saturday that the data of 900,000 clients had been accessed without authorisation and that it had already alerted authorities to investigate the incident.
The breach came as Philippine investigators were looking into allegations by the country's foreign minister last week that a privately contracted firm took away documents and data from the Department of Foreign Affair's passport database.
Cebuana Lhuillier, whose services include pawning, remittance, microinsurance, and business to business micro loan solutions, said some information like birthdays, addresses and sources of income, were affected in the breach involving an email server used for marketing.