Manila, Philippines – Organisations across the Philippines are facing mounting operational risks as cyber threats become more frequent and increasingly complex, prompting a shift in focus from prevention alone to comprehensive recovery preparedness.
Recent findings from Viettel Cyber Security’s report show a sharp rise in cyber incidents in the country, with 76 breach cases affecting more than four million user accounts. Globally, AI-driven fraud is also a growing concern, noting that generative AI tools are enabling more persuasive and scalable scams.
For sectors such as business process outsourcing, retail, logistics, healthcare and financial services, where daily operations rely heavily on uninterrupted access to digital platforms, even short periods of downtime can lead to financial losses and reputational harm. Against this backdrop, Synology has underscored that data protection must be regarded as an organisational priority rather than solely a technical function.
“Effective data protection is no longer just about keeping copies of data. It must ensure that data remains secure and immutable, and that systems can be restored quickly even if primary environments are compromised,” Claire Huang, country manager for the Philippines at Synology, shared.
“Organisations need coordinated data protection and tested recovery processes to reduce disruption and protect critical operations.”
The company has observed that conventional backup approaches are increasingly inadequate. Threat actors are now targeting not only primary infrastructure but also backup repositories and recovery systems, aiming to disrupt restoration efforts and prolong operational outages.
As a result, data protection strategies must ensure that stored information remains secure, tamper-resistant and capable of being restored promptly, even if production environments are compromised.
Gaps in access management, limited system visibility and backup environments that remain linked to live networks continue to expose organisations to heightened risk. Ransomware campaigns in particular are designed to paralyse operations, which can significantly extend recovery timelines and increase associated costs.
There are also regulatory considerations. Under the Data Privacy Act of 2012 in the Philippines, organisations are required to adopt reasonable and appropriate measures to safeguard personal data, including ensuring its availability during and after security incidents. Failure to maintain accessible and protected information may therefore carry compliance implications in addition to operational impact.
Following this, Synology’s ActiveProtect solution has been developed to address these requirements by consolidating management, securing essential systems and supporting dependable recovery processes.
The company maintains that coordinated data protection frameworks and regularly tested restoration procedures are essential to minimise disruption and sustain core operations as cyber risks continue to evolve.

