Sources & Methodology

Figures current as of August 2026

Covers every statistic published on shore.byoceaned.com.

We make factual claims about school cybersecurity, and some of the research behind them is our own. That is a reason for more disclosure, not less. This page lists every figure we publish, what backs it, and what a reader should know before repeating it.

Where a figure comes from SchoolBreach.org, we are citing our own database. Those figures are labelled as OceanEd research everywhere they appear, so they are never read as independent confirmation of our own marketing.

Every figure we publish

  1. 90 documented school data breaches in the Philippines, 2012–2026

    Homepage — security ledger

    Source: OceanEd — SchoolBreach.org — Philippine school data breach tracker (OceanEd research)

  2. 19.2M+ records exposed across tracked breaches

    Homepage — security ledger

    Source: OceanEd — SchoolBreach.org — Philippine school data breach tracker (OceanEd research)

  3. 63% of tracked breaches rated Critical or High severity

    Homepage — security ledger

    Source: OceanEd — Breach trends and severity breakdown (OceanEd research)

    21 incidents rated Critical (23%) and 36 rated High (40%). Severity is assigned editorially with AI assistance rather than by a published numeric scale.

  4. 106 breached accounts per 100 people in the Philippines, against 52 across Asia

    Homepage — security ledger

    Source: Surfshark — Data breach monitoring — Philippines (Independent research)

    A cumulative count since 2004, not a single-year figure, and it covers all Philippine breaches rather than schools specifically.

  5. 401K records across 28 incidents in 2020, rising to 16.6M records in 2025 — a 41× increase

    Homepage — attack scale pull quote

    Source: OceanEd — Breach trends and severity breakdown (OceanEd research)

  6. 37 incidents logged in 2026, passing 2020's previous record of 28

    Homepage — attack scale pull quote

    Source: OceanEd — Breach trends and severity breakdown (OceanEd research)

    Year-to-date. 76% of 2026 entries are anonymized, sourced from threat-actor posts that we have not been able to corroborate against an official or media report.

  7. Unauthorized access accounts for 41% of tracked incidents; website defacement for 18%

    Homepage — attack scale pull quote

    Source: OceanEd — Breach trends and severity breakdown (OceanEd research)

  8. 2026's largest cluster ran through shared hosting, with web shells used to pivot between schools

    Homepage — attack scale pull quote

    Source: OceanEd — Breach trends and severity breakdown (OceanEd research)

  9. Of 11,334 WordPress vulnerabilities disclosed in 2025, 91% were in plugins and 9% in themes; 46% had no patch at disclosure

    Homepage — “No WordPress, no plugins”

    Source: Patchstack — State of WordPress Security in 2026 (Independent research)

    Counts newly disclosed vulnerabilities across the WordPress ecosystem worldwide. It is not a measure of breaches at Philippine schools.

  10. 2.19 million Filipinos worked overseas in 2024

    Homepage — “Invisible to overseas parents”

    Source: Philippine Statistics Authority — 2024 Survey on Overseas Filipinos (Government statistics)

    Counts overseas Filipino workers. The PSA does not break this figure down by whether those workers have school-age children.

Our own research

SchoolBreach.org is a free public database we build and maintain. When a figure comes from it, we are citing ourselves — so it is labelled as such rather than presented as independent corroboration.

Independent research

Published by organizations with no connection to OceanEd. We quote these figures as they appear in the original and do not re-analyze them.

Government statistics

Official figures from Philippine government agencies.

How we handle figures

  • Every statistic on the site is listed above. If a figure is published without a source behind it, that is a mistake — please tell us and we will correct or remove it.
  • We quote third-party research as published. Where we have drawn a conclusion the source itself does not state, we say so rather than attributing our inference to them.
  • SchoolBreach.org counters move as new incidents are documented, so the figures on this site are reconciled against the database periodically. The “current as of” date above says when that last happened.
  • Where a source carries a limitation that affects how a figure should be read — a cumulative rather than annual count, incidents we could not independently corroborate — it is noted beside the figure rather than left for the reader to discover.