Overview:
Palau is moving to shore up government cybersecurity after a string of data breaches — including one that exposed thousands of medical records on the dark web — fueled a surge in scams and phishing targeting citizens. A newly completed proof of concept, funded at no cost to Palau by U.S. firm Forward Edge-AI, tested post-quantum encryption devices designed to keep government data secure even if other systems are breached. Officials say full deployment is targeted before the Pacific Islands Forum Leaders' Meeting.
By: Laurel Marewibuel
Koror, Palau — With cyber scams and phishing on the rise, Palau is moving to strengthen government data protections after recent breaches exposed thousands of citizens’ records, officials say.
“The proof of concept tested government systems, but no sensitive government data was exposed,” Jay Anson said, addressing public concern about whether the pilot put Palauan information at risk.
The pilot, conducted under a memorandum of understanding with Forward Edge-AI, evaluated post-quantum encryption devices and new defensive technologies designed to keep government data secure even if other systems are compromised. Forward Edge-AI provided the devices and technical expertise at no cost to Palau, Anson said.
Officials would not detail the specific systems tested, citing operational security, but emphasized that testing did not expose sensitive information. “I can’t disclose the exact systems, but no sensitive govt data was exposed,” Anson said.
Palau’s urgency follows several known breaches in recent years. Government sources say there have been at least six incidents: two at the Ministry of Finance, one at the airport, one at the National Development Bank of Palau, and one involving the Ministry of Health and Human Services. The MHHS breach is the most damaging, according to officials, because medical records and personal information for thousands of Palauans were published on the dark web and are now being used in scams and phishing attacks.
“That’s why we are seeing a huge increase of scams and phishing campaigns in Palau currently,” Anson said. “Many Palauans are reporting falling victim to these scams.”
Forward Edge-AI’s technology, Anson said, is intended to make government data inaccessible even if attackers steal data from another system. “The Forward Edge technology will make it impossible to compromise any data even if another government system is breached and the data stolen,” he said.
Questions about cost and procurement
Palauan citizens asking who will pay for a full rollout can take some comfort in Anson’s answer. “All post-quantum encryption devices and technical expertise was fully funded by Forward Edge-AI at no cost to Palau,” he said, indicating no immediate financial burden on the government for the pilot equipment and expertise.
The pilot was executed under an MOU rather than a competitive procurement, Anson confirmed. He did not elaborate on any future contracting process for broader deployment.
Timeline and interim protections
Officials hope to complete full deployment before the upcoming Pacific Islands Forum Leaders’ Meeting, Anson said. In the meantime, government networks continue to run on existing virtual private networks and standard layers of protection.
“We plan to complete full deployment before PIFLM,” Anson said. “We currently use a standard blend of defense-in-depth.”
What this means for Palauans
For everyday residents, the measures aim to reduce the scams and identity fraud that have surged since the MHHS breach. The new encryption and protective tools are intended to harden government systems so that even a successful breach elsewhere cannot be used to exploit Palauan data.
“It’s important for citizens to remain vigilant — watch for suspicious messages, don’t share personal information, and report scams — but these upgrades will make it much harder for criminals to profit from stolen data,” Anson said.
Officials encourage citizens to continue using fraud-reporting channels and to follow guidance from government agencies as the rollout progresses.