.png){kind=logo}
1 week ago
10
Upgrade to High-Speed Internet for only ₱1499/month!
Enjoy up to 100 Mbps fiber broadband, perfect for browsing, streaming, and gaming.
Visit Suniway.ph to learn
Cristina Chi - Philstar.com
December 1, 2025 | 6:22pm
TicketNet booths at the Philippine Arena in Bulacan as seen in an image the ticketing company posted on Nov. 29, 2025.
TicketNet via FB
MANILA, Philippines — The Araneta Group of Companies detected a cybersecurity breach affecting three of its business units.
The November 28 breach affected companies are Araneta Center Inc., which operates shopping malls; TicketNet Inc., which sells event and cinema tickets; and PPI (Dairy Queen) Holdings Inc.
In a statement on Monday, December 1, the Araneta group said it brought in external experts to help assess the incident.
"We take this matter seriously and have launched an investigation, including international cybersecurity experts with long experience in these matters, to better understand the scope of the incident," it said.
The company said it has implemented security measures to protect its systems from further threats.
It has also informed the National Privacy Commission and the Department of Information and Communications Technology about the breach, as required under Philippine data protection law.
Little is known about the actual scope of the breach. Araneta in its statement did not specify what data may have been compromised or how many customers were affected. It also did not say whether customer financial information or personal details were accessed during the cybersecurity incident.
"We want to assure everyone that we are committed to protecting the public's data as well as that of our stakeholders," the group said in a statement. "We are handling this challenge with utmost diligence and transparency."
The National Privacy Commission did not immediately respond to questions about the incident. This article will be updated with their response.
Under the Data Privacy Act of 2012, companies must notify the NPC within 72 hours of discovering a personal data breach that could harm individuals. The law allows the commission to impose penalties of up to P5 million for violations.
