UPMin CSRS faces major security breach, investigation underway

Sasha Prado, Cymon Castillo, and Fiona Pangandoyon

The University of the Philippines (UP) Mindanao temporarily shut down its Computerized Student Records System (CSRS) on August 11 after an unauthorized message ppeared on the platform.

In an advisory, the Office of the Chancellor said the incident was detected in the morning and the Information Technology Office (ITO) took the system offline within minutes.

The university said the move was to “contain the incident and prevent further access.”

Preliminary findings indicate there is no evidence of any data breach or leakage of faculty or student information.

“A thorough investigation is ongoing, in coordination with relevant agencies to investigate, identify, and apprehend the perpetrator/s,” the statement read.

The CSRS was restored on August 12 and is accessible on weekdays from 8:00 a.m. to 5:00 p.m.

The ITO has revalidated accounts of non-student users and reminded all users to periodically update their login credentials.

UP Mindanao said additional layers of protection are being implemented and urged the public to avoid spreading unauthorized or unverified information about the incident.