PAGCOR, the Philippines' gambling regulatory authority, suffered a data leak involving its National Database of Restricted Persons, containing ~560,000 individuals barred from gambling—including government officials and ~1,711 self-excluded problem gamblers. An international cybercriminal group disclosed the list, criticizing PAGCOR for inadequately addressing gambling addiction. While PAGCOR denied a direct breach of its systems, it acknowledged the leak occurred via a licensed gambling operator with authorized database access, exposing sensitive personal and professional data. The incident raises concerns over regulatory oversight, consumer protection failures, and the misuse of restricted data, potentially enabling exploitation of vulnerable individuals or reputational harm to public officials. The leak also underscores systemic vulnerabilities in third-party access controls within the gambling sector.