The alliance for Philippine healthcare
Creating a unified, cyber‑resilient healthcare ecosystem.
HCTA brings together the CIOs, CISOs, CTOs and data protection officers of the country’s hospitals, HMOs, laboratories, pharmacies and health-tech providers — one alliance, sharing intelligence and hard-won practice, so that no institution defends alone.
Our origin
The genesis: a call to action
HCTA was not founded on a whiteboard. It was formed in the middle of an incident, when the people responsible for the country’s hospitals realised the only defence that scales is a shared one.
- 22 Sept 2023The catalyst
- Ransomware hits the Philippine Health Insurance Corporation. The Medusa ransomware group exploited a vulnerability arising from an expired anti-virus licence and a public-facing remote desktop protocol server.
- The impactWhat was lost
- More than 40 million records compromised. Over 40% of PhilHealth membership and employee data was breached.
- The responseDays after
- Hospital groups acted together, unprompted. Engr. Jojo Nufable, with the Metro Pacific Health Cyber Security, Redundancy & Resiliency Technical Working Group led by Edwin Tambeling of AHMC, took immediate steps to disconnect from the PhilHealth network, run rapid incident response and implement preventive controls. Mitigation and remediation action plans were shared openly with Arnel Distor of UP-PGH, The Medical City Group and the Association of HMOs of the Philippines.
- 2024The realisation
- Cooperation outweighs competition. The incident made clear that co-operation, in spite of existing competition, is essential to safeguarding the entire healthcare ecosystem. This was reinforced when Engr. Nufable joined the 2024 GovWare Healthcare Forum in Singapore, the premier cybersecurity event in the region, where the organisers gave the idea their full support.
- 2026The alliance
- HCTA is formally launched. Incorporated with the Securities and Exchange Commission, inducted at its Inaugural Annual General Members Meeting on 30 January 2026, and now operating a full programme of forums, partnerships and a Member Portal.
About us
Protecting healthcare data, together
HCTA is a proactive response to one of the most pressing shared challenges of our time: securing healthcare against relentless cyber threats. Years of collaboration laid the foundation for what we now formally launch — a united effort to build a cyber-resilient healthcare ecosystem.
Share actionable intelligence
Threat indicators, incident lessons and vetted best practices, exchanged between peers who run the same systems and face the same adversaries.
Advocate for stronger standards
A single voice for policies and standards that close the systemic gaps in the sector.
Build a unified response framework
Coordinated incident response and resiliency playbooks, so that when one institution is hit, the rest of the sector knows what to do within hours.
Raise cybersecurity maturity
Lifting the posture of the whole ecosystem to protect patient data, healthcare information systems and critical infrastructure — and preparing the industry for the AI technology revolution.
Membership
Why leaders join HCTA
You already carry the accountability. Membership gives you the peers, the intelligence and the standing to carry it well.
A peer network you cannot buy
The security and technology heads of the country’s major hospital groups, HMOs and health-tech providers, in the same room. Candid conversations, under a shared understanding of confidentiality.
Intelligence before the headline
Sector-specific threat sharing alongside Health-ISAC’s global community, so you hear about the campaign targeting Philippine healthcare before it reaches your perimeter.
Help when it goes wrong
A unified incident-response framework and a community that has already done this — contain, notify, recover. You will not be improvising alone.
A seat at the policy table
HCTA advocates for stronger standards and policies. Members help shape the requirements the sector will be held to, rather than reading about them afterwards.
Programmes built for your role
General membership meetings, Health-ISAC forums and workshops, and technical sessions on agentic-AI security, identity governance and quantum resilience.
The Member Portal
A permanent membership ID and QR credential, event registration and certificates, corporate seats for your team, and member-only resources.
Join us
Three ways to be part of the alliance
Practitioners from hospitals, HMOs, laboratories, pharmacies and other healthcare service providers in both the private and public sectors are welcome.
Individual member
For CIOs, CISOs, CTOs, DPOs, IT and security practitioners, clinical informatics leads and academics working in healthcare.
- Permanent membership ID and QR credential
- Member forums, briefings and threat sharing
- Priority registration for HCTA events
- Attendance certificates with verification
- Voting rights at General Membership Meetings
Corporate member
For hospitals, HMOs, clinics and healthcare organisations that want their whole technology and security team inside the alliance.
- One organisation account with staff seats
- Each staff member gets their own membership ID
- Staff join by invite code, managed by your admin
- Institutional recognition at HCTA events
Corporate membership applies after becoming an individual member.
Alliance partner
For cybersecurity vendors, technology companies, insurers, law firms and consultancies that serve healthcare and want to stand with the sector.
- Sponsorship of summits, forums and programmes
- Logo placement, speaking slots and booth access by tier
- First right of refusal on title sponsorships
- Loyalty discounts on event sponsorship
Latest gathering
Mid-Year General Membership Meeting (Mid-GMM) 2026
The alliance's mid-year gathering at Seda BGC, where the HCTA Member Portal went live.
Mid-Year General Membership Meeting (Mid-GMM) 2026
- Venue
- Velvet Room, Level 2, Seda BGC
Mid-Year General Membership Meeting (Mid-GMM) 2026 July 21, 2026 | 8:00am - 5:00 Theme: "Future-Proofing Healthcare: From Agentic Security to Quantum Resilience"
The alliance
No institution should defend alone.
If you are responsible for the technology, security or data privacy of a Philippine healthcare organisation, you belong in this alliance.