“If they can’t adhere to the most basic operational and security hygiene, how can they be trusted with handling the data of millions of Filipinos?”