The week the official door was the one that leaked

OFW records, an official Claude Code extension and Binance all broke the same promise: that the proper channel keeps you safe.

On September 7, a scanner run by a cybersecurity firm called Hunt.io found a stranger's working folder sitting on an open web server. Inside were logs, tools, and a list of 27 SQL Server backups, meaning full copies of databases, with names like POEA_EServices, OfwDB, BMonline and OWMSDB. Those names match the POEA, Balik-Manggagawa and OFW Welfare Monitoring systems. About 68 GB in total, Rappler reported this week.

Nobody caught it. Hunt.io says the operation came to light through the thief's own mistake, not through detection.

So here is the uncomfortable part, plainly. Almost every story this week that could hurt you came through an official door: the government system that holds the papers of the seafarers and domestic workers in your family, the official Claude Code extension your client's developer installed, the biggest crypto exchange in the world, the one many freelancers use to get paid. You could have followed every rule this week. It would not have mattered.

The records

Be fair about what we know, because it is less than the headline suggests. Hunt.io says it never had the data and did not open the files, so the file names are not the contents, and what was actually taken is unconfirmed. The firm does not tie the theft to any known group. The National Privacy Commission says it is investigating with the Department of Migrant Workers, and Rappler says it asked DMW and the national CERT for comment.

But you do not need the contents confirmed to know what comes next. A scammer does not need your whole file, only one true detail, a contract date or an agency name, to make a text sound like it came from government. Hunt.io's advice is to "trust official notices over anyone else who reaches out." Until DMW says otherwise, treat any call or message that cites POEA or Balik-Manggagawa details as a likely scam.

That is a lot of families.

The tool

The second story is for anyone who builds pages or code, or works for a client who does. Security firm Phorion says version 2.1.313 of the Claude Code for VS Code extension, as served on the Cursor Marketplace, carried a backdoor. Claude Code is Anthropic's AI coding assistant, and an extension is an add-on that runs inside a code editor with your own permissions. The hidden code ran the moment the file loaded. No click needed. It added an attacker's key to the computer's SSH settings (SSH is the system for logging into a computer remotely), tried to switch remote login on, set itself up to survive restarts, and sent system details back to its operator.

Who published it is still open. On Hacker News, a commenter identifying himself as Felix from Anthropic says Anthropic's systems and employee laptops were not compromised, and that someone with access to Cursor's marketplace published a tampered copy Anthropic did not build or publish. Another commenter says Reuters quoted Cursor saying the extension was not developed by Anthropic. Those are comments, not confirmed findings. Phorion says Cursor removed the release, and the 2.1.313 versions on NPM and the VS Code registry were pulled too.

The rule we all repeat to clients is install only official tools. This was the official tool.

If a client's developer uses Claude Code in Cursor or VS Code, ask today whether 2.1.313 was ever installed. A commenter reposted Cursor's own check: the planted key is labeled svc-telemetry in the SSH authorized keys file, and Phorion adds that teams should match the key fingerprint, not just the name. If the answer is yes, Phorion says start incident response, which means treating that computer as compromised before the next client login.

The money

Then Binance. Wired reports that attackers drained roughly $6.3 billion from Binance hot wallets, the online wallets an exchange keeps so withdrawals go out fast, in about 20 minutes on Thursday. Tracing firm TRM Labs says preparation began at least 36 hours earlier, with the code tested on smaller wallets first. TRM and Chainalysis suspect a North Korea-based group called TraderTraitor, which the FBI blamed for last year's $1.5 billion Bybit hack. Neither Binance nor law enforcement has named North Korea. Binance says it will cover all losses, that it and other firms have frozen about half the stolen funds, and that a compromised laptop was only its first lead before it found additional points of breach.

Thirty-six hours of patience. Twenty minutes of work.

If you get paid or keep savings on Binance, expect withdrawal delays. Expect the refund messages too. The promise to cover all losses is the most useful thing a scammer has been handed all year, precisely because it is true, so the fake version will read exactly like the real one. Only trust notices inside the official app.

Meanwhile, the easy part got easier

While all of this was breaking, Google kept shipping. Gemini in Slides can now restyle a whole presentation from the side panel, swapping fonts, colors and backgrounds across every slide, or squashing slides 5 to 7 into one, for Business Standard and up and Google AI Pro and Ultra, English only for now. The Gemini app can now make the file itself, a deck or a Sheets tracker or a Doc, though on a phone it only handles PDFs. And Microsoft is offering buyouts to about 60,000 employees, the largest such offer it has made.

Put the week side by side and it says one thing. The clicking is getting cheap, fast. Restyling a deck, building a tracker, the hours you used to bill for. Clients on Workspace will expect a restyle in minutes, so price that work on judgment and content, not time.

The checking is not getting cheap. Somebody still has to ask the developer about version 2.1.313. Somebody has to tell her Tita that the text quoting her Balik-Manggagawa details is not from DMW. Somebody has to read the Binance message twice before tapping anything. No model did that this week. People did, or didn't.

The only reason we know about the OFW files is that a thief left a folder open.

I keep coming back to that. Not a detection system, not an audit. A mistake, found by a stranger's scanner, three weeks before anyone told the families whose names may be on those files.

So this weekend, if someone in your family works abroad, send them a message. Not a warning, just a message, so that the next one they get claiming to be about their records is easier to doubt.

Get Diskarte Daily in your inbox at 6am, before your first client: subscribe here.

Drafted with AI from the week's linked sources, then fact-checked and edited by Your Name.