Converge Holds 4-6% Target as Profit Falls 9%

The Conversation

Converge ICT Solutions Inc. told reporters on Monday that it will not cut its 2026 revenue growth guidance, holding at 4 to 6 percent, even after nine-month net income fell 9.1 percent to ₱8.1 billion from ₱8.9 billion a year earlier14. The fiber broadband provider's subscriber base grew to 3.1 million by the end of September from 3.09 million at the start of the year, a far slower pace than the same stretch of 2025, when it added roughly 230,000 subscribers over the comparable period14. Chief Financial Officer Robert Yu said the company is "cautiously optimistic" and is watching inflation and Bangko Sentral ng Pilipinas consumer confidence surveys before deciding whether to move the target2027.

The same day brought a second, unrelated piece of network-adjacent news: the Securities and Exchange Commission confirmed a data security incident on its digital platforms, detected on November 6, and said personal profile information of registered users may have been exposed37. The commission said no company records, passwords, or stored data were altered, and it notified the National Privacy Commission on November 9 as required3724. A cybersecurity advocacy group, Deep Web Konek, had flagged a possible breach involving SEC-related accounts before the agency's advisory went out37.

Around those two stories sat a cluster of corporate and community items that describe how the country's connectivity build-out is being sold and extended: PLDT Enterprise ran October cybersecurity awareness sessions for business, military, government, and international audiences on deepfakes, phishing, and executive impersonation3; PLDT and Smart, with the Department of Trade and Industry, gathered more than a hundred micro-, small- and medium-sized enterprise owners in Puerto Princesa for a digital-tools session19; Converge and a motorbike group delivered tablets and school supplies to two mountain schools in Nueva Vizcaya23; and Converge announced ISO/IEC 27001:2022 certification for its information security management system26. The day's telco conversation was not one story but a set of them, and the largest single item by coverage value in the captured set was Converge's guidance hold, which ran in BusinessWorld, Manila Standard, Malaya, the Manila Times, and the Inquirer14202728.

Key themes

1. Converge holds 4-6% revenue growth guidance despite a 9.1% profit decline. Nine-month net income fell to ₱8.1 billion from ₱8.9 billion, and third-quarter attributable net income dropped 11.9 percent to ₱2.60 billion, as expenses grew 10.9 percent against a 5.5 percent rise in revenue1424.
2. Subscriber growth has nearly stalled at 3.1 million. The base moved from 3.09 million in January to 3.1 million in September, against roughly 230,000 net additions in the same period of 202514.
3. The SEC confirmed a breach of user data on its digital platforms. The incident was detected November 6; the agency says no passwords leaked and no data was altered, and it reported to the National Privacy Commission on November 93724.
4. PLDT Enterprise spent October teaching staff to spot AI-enabled fraud. Sessions covered deepfakes, phishing, social engineering, and executive impersonation for business, military, government, and international learning audiences3.
5. More than 100 Palawan MSMEs trained on digital tools. PLDT and Smart ran the session with the Department of Trade and Industry under the #KonektedforLivelihoods program19.
6. Converge earned ISO/IEC 27001:2022 certification for information security management. The standard covers how an organization protects information and manages security risk across operations26.
7. Converge took connectivity and devices to two remote Nueva Vizcaya schools. Eleven riders from RAMTAT Ph carried tablets and supplies to Ansipsip and Domolpos elementary schools, an hour and a half and another hour from the Kayapa municipal hall23.
8. A cable theft case in San Juan shows the physical exposure of underground plant. A 34-year-old construction worker was arrested after CCTV caught him entering a manhole on Jose Abad Santos Street; authorities recovered copper cable worth more than ₱230,000 belonging to a telecommunications company29.

How the narratives stack

Dominant. Converge's guidance decision carried the most weight in the captured set, and it did so on both scales that matter here: it was the story most outlets picked up, and it is the one with direct consequences for the company's investors and customers. BusinessWorld reported the third-quarter profit decline of 11.9 percent and the 5.5 percent revenue rise to ₱11.80 billion for the quarter, with expenses up 10.9 percent to ₱8.14 billion24. Manila Standard led on the nine-month figures — revenue up nearly 4 percent to ₱34.2 billion, net income down 9 percent to ₱8.08 billion — and quoted chief executive Dennis Anthony Uy on the "complex economic landscape marked by persistent inflation and high energy costs"28. The Inquirer and the Manila Times both emphasized the unchanged 4 to 6 percent target and the CFO's caution1420. Malaya noted that the company had already trimmed the projection from 10.2 percent earlier in the year27. Across the items reviewed, this story drew the heaviest newspaper coverage of any telco item, with the BusinessWorld piece alone carrying an estimated ₱502,000 in advertising-equivalent value — the cost of buying the same column space as paid advertising, not a count of readers24.

Counter-narrative. The SEC breach is the day's most consequential story for ordinary users, and it ran on a different track from the Converge earnings news. The commission's advisory told users their accounts "may have been leaked potentially through malware infection or unauthorized access by a third-party threat actor of your laptop, desktop, mobile phone or any other device you used to access our digital platforms"37. That phrasing matters: the SEC is pointing at users' own devices as a possible entry point, not only at its own servers. BusinessWorld reported that the incident involved names, contact details, and other account information of registered users, and that the agency is still verifying the origin, scope, and validity of the affected records24. The SEC regulates corporations and the capital markets; its digital platforms handle company registrations and filings, so the affected population is mostly businesses and their officers rather than retail consumers. The National Privacy Commission is the country's data-protection regulator, and notification within a set period after discovery is a legal obligation under the Data Privacy Act. The story was covered by Philstar, BusinessWorld, and Manila Standard372425, but it did not dominate the business pages the way the Converge numbers did.

Emerging. Two threads point at where telco competition is moving. The first is security as a product: Converge's ISO/IEC 27001:2022 certification and PLDT Enterprise's October workshop series are both attempts to sell trust alongside bandwidth263. PLDT's sessions covered deepfakes, phishing, and social engineering for audiences including the Philippine Military Academy and an Institute of Data engagement, with an emphasis on verification, credential protection, and prompt reporting3. The second is the enterprise and government market: the Palawan MSME session, run with the Department of Trade and Industry, is a customer-acquisition play aimed at small businesses that have not yet digitized19. Neither story is large on its own. Together they describe a shift from signing up households to selling services to organizations.

Under-covered. The cable theft arrest in San Juan received a single item in the captured set29. It is a small crime story, but it illustrates a cost that does not appear in earnings reports: underground copper plant is valuable enough to be worth climbing into a manhole for, and the recovered cable was valued at more than ₱230,000. The suspect faces charges under Republic Act No. 10515, the Anti-Cable Television and Cable Internet Tapping Act of 2013, which criminalizes unauthorized interception of cable services, along with a provision on theft29. Converge's community outreach in Nueva Vizcaya is the other low-placed item: tablets and supplies for two mountain schools, delivered by eleven riders over roads that take an hour and a half from the municipal hall to the first school23. It is corporate social responsibility rather than network build-out, and it drew one item.

Platform insights

The monitoring writeup for this window did not include social posts with engagement figures, so this section is limited to what the published items themselves show about how the stories traveled.

• Online news portals. The Converge guidance story ran across at least five online business desks within roughly two hours of the briefing — the Inquirer at 6:13 p.m., the Manila Times at 5:26 p.m., Malaya at 4:12 p.m., and BusinessWorld and Manila Standard in their November 10 print editions1420272428. The clustering suggests a scheduled briefing with a prepared release rather than a breaking story.
• Blogs. Two blog items in the set carried promotional content: a Manila Republic piece on PLDT Enterprise's cybersecurity workshops, structured with key-takeaway bullets typical of a sponsored or syndicated post3, and a Chasing Curious Alice post on OPPO's 11.11 sale, which is consumer-tech retail rather than telecom network news16. Blog distribution is being used for product and program announcements that would not clear a news desk.
• Broadsheets. BusinessWorld and Manila Standard carried the Converge story in print alongside the SEC breach, giving both stories a second day of life after the online filings242528. The print versions added detail the online stories did not: the quarterly expense breakdown in BusinessWorld and the full-year revenue figure in Manila Standard2428.
• Tabloids. The PM tabloid carried no telecom business story in this set; its pages went to the Duterte impeachment trial, volleyball, and entertainment303132. For a mass-market readership, telecom news arrives through prepaid load promotions and celebrity endorsements rather than earnings briefings.

Key voices and communities

Converge management. CFO Robert Yu and CEO Dennis Anthony Uy set the tone for the day's biggest story. Yu's line — "We are not adjusting yet. We looked at the BSP's consumer expectations survey and also there's big improvement in our third quarter" — framed the guidance hold as a data-driven decision rather than optimism24. Uy's statement positioned the company around long-term demand: "Today, we are operating in a complex economic landscape marked by persistent inflation and high energy costs. Despite these challenges, we remain confident in the long-term demand for connectivity and digital solutions"28.

The Securities and Exchange Commission. The commission's advisory is the primary document on the breach, and its careful wording — "may have been leaked potentially" — leaves the cause open37. Its decision to notify the National Privacy Commission on November 9, three days after detection, sets the timeline that affected users and privacy advocates will scrutinize37.

PLDT Enterprise and the DTI. The PLDT Enterprise workshops and the Palawan MSME session put the company in an educator role with government partners319. The framing is practical: verify before you act, protect credentials, report quickly. For small-business owners in the provinces, this is often the first structured cybersecurity training they receive.

Cybersecurity advocates. Deep Web Konek flagged the possible SEC breach before the agency confirmed it37. Advocacy groups of this kind have become an early-warning layer for Philippine data incidents, and their public posts can force an agency's hand on disclosure timing.

Investors and analysts. The coverage of Converge's numbers focused on the gap between revenue growth and expense growth2428. The 4 to 6 percent guidance, already cut from 10.2 percent earlier in the year, is now the number the market will hold the company to through the fourth quarter27.

Narrative streams

Converge holds guidance as profit falls and subscribers flatten

Converge's nine-month revenue rose nearly 4 percent to ₱34.2 billion, but net income fell 9 percent to ₱8.08 billion from ₱8.9 billion, and the third quarter was worse: attributable net income of ₱2.60 billion, down 11.9 percent, as expenses climbed 10.9 percent to ₱8.14 billion against a 5.5 percent revenue rise to ₱11.80 billion2824. The subscriber number tells the same story from the demand side. The base went from 3.09 million in January to 3.1 million in September — about 10,000 net additions in nine months, against roughly 230,000 in the same period of 202514.

The company's explanation is household budgets. Persistent inflation and slower economic growth have squeezed purchasing power, particularly among lower-income households, which is where the remaining unconnected market sits14. Yu said the company is watching the Bangko Sentral ng Pilipinas consumer expectations survey and food and fuel prices, and sees improvement in the third quarter and positive forward-looking estimates2427. The Bangko Sentral ng Pilipinas is the country's central bank; its consumer expectations survey tracks household sentiment on spending and the economy, and it is one of the inputs Converge cites for holding the target.

For the sector, the read is that the household broadband market is close to saturated at current price points. A company that adds 10,000 subscribers in nine months cannot hit mid-single-digit revenue growth from new homes alone; it has to raise revenue per user or sell more to businesses. Converge's enterprise and digital-solutions line, and its infrastructure completion, are where that growth has to come from28. Rivals face the same arithmetic, which is why the day's other telco items — PLDT's MSME training and enterprise cybersecurity sessions — are aimed at the same business customers193.

The SEC breach puts user data and disclosure timing in focus

The SEC detected a data security incident on November 6 and confirmed it publicly on November 9, the same day it notified the National Privacy Commission3725. Its initial findings: no company records affected, no passwords leaked, no data modified, internal database infrastructure and system integrity intact24. What may have been exposed is personal profile information of registered users — names, contact details, and other account information — and the agency is still verifying the origin, scope, and validity of the affected records24.

The advisory's language points at devices as a possible vector: accounts "may have been leaked potentially through malware infection or unauthorized access by a third-party threat actor of your laptop, desktop, mobile phone or any other device you used to access our digital platforms"37. That is a meaningful distinction for users. If the exposure came through compromised devices rather than the SEC's servers, then the agency's systems are intact but the accounts are still at risk, and the remedy sits partly with users — changing passwords, checking devices, watching for phishing that uses SEC branding.

The SEC has begun containment and preventive measures, including security scans, checks for indicators of compromise, digital forensics, and log analyses, and has tightened access controls25. The National Privacy Commission, created under the Data Privacy Act of 2012, is the agency that receives breach notifications and can investigate and impose fines. The timing — detection on November 6, notification on November 9 — falls within the window the law allows, but the gap between the Deep Web Konek flag and the official advisory is the part privacy advocates will press on37.

For the sector, the read is that regulators are now breach subjects too. The SEC supervises the disclosure practices of listed companies; it now has to manage its own disclosure of a data incident. Telecommunications and technology firms that hold user data should expect clients and regulators to ask sharper questions about incident response timelines, and the SEC's own template — confirm scope, notify the privacy commission, publish an advisory, audit systems — is the one that will be compared against.

PLDT takes cybersecurity and digital skills to institutions and small businesses

PLDT Enterprise ran a month of cybersecurity awareness engagements in October, covering impersonation, phishing, AI-enabled fraud, and practical response habits3. The sessions included a resilience briefing on October 6, a Philippine Military Academy workshop on October 21, and an Institute of Data engagement that reached an international learning community3. The content was deliberately basic: recognize impersonation, question unusual requests, protect credentials, report potential threats promptly3. Deepfakes — synthetic video or audio made to look like a real person — were part of the curriculum, which reflects how fraud now reaches executives and staff through convincing fake voices and faces.

The same company, through PLDT and Smart and the #KonektedforLivelihoods advocacy, worked with the Department of Trade and Industry to run MSME Day Palawan, a whole-day session for more than a hundred micro-, small- and medium-sized enterprise owners in Puerto Princesa19. The Department of Trade and Industry is the government agency that promotes and regulates small business; its involvement gives the session a public-interest frame beyond a product pitch. The training covered using digital solutions to improve operations, reach more customers, and open new business opportunities19.

For the sector, the read is that the growth market is organizations, not households. A saturated consumer broadband market pushes telcos toward enterprise connectivity, cloud, and security services, and those services require customers who know how to use them. Training programs are customer education and customer acquisition at the same time. The risk is that the programs stay small — a hundred owners in one province, a few hundred attendees across a month of workshops — while the fraud they are meant to counter scales nationally.

Converge pairs security certification with community connectivity

Converge earned ISO/IEC 27001:2022 certification for its Information Security Management Systems, the internationally recognized standard for how an organization protects information and manages security risk26. The certification was issued with Bureau Veritas, and the company framed it as a milestone in building trust with customers and stakeholders26. ISO/IEC 27001 is not a product; it is an audited management system, meaning the company has documented processes for identifying, assessing, and treating information-security risk, and an external auditor has checked them.

The same week, Converge and RAMTAT Ph, a group of adventure motorbike enthusiasts, delivered tablets and school supplies to Ansipsip Elementary School and Domolpos Elementary School in Nueva Vizcaya23. The 11-rider team traveled an hour and a half from the Kayapa municipal hall to Ansipsip and another hour to Domolpos23. According to Barangay Ansipsip community chief Angel Caruncon, the difficult terrain and long daily commute mean many students live in the school dormitory for months at a time23.

For the sector, the read is that trust is being marketed on two fronts at once. The certification speaks to enterprise clients and regulators who now ask vendors for proof of security management; the school visit speaks to the public and to local governments in areas where the network is the only link to services. Both are attempts to differentiate in a market where the basic product — fast fiber — is increasingly similar across providers. The certification is the more durable asset: it can be cited in procurement bids, while the school visit is a one-day event.

Cable theft and the physical cost of underground plant

A 34-year-old construction worker was arrested in San Juan City after barangay staff monitoring CCTV saw a man park a motorcycle and enter a manhole near the intersection of Jose Abad Santos and Mascardo Streets29. Police recovered two sections of copper cable, 1.2 meters and 1.1 meters long, valued at more than ₱230,000, belonging to a telecommunications company, along with a saw, a safety helmet, and a sack29. The suspect is in police custody awaiting inquest proceedings for violations of Republic Act No. 10515, the Anti-Cable Television and Cable Internet Tapping Act of 2013, and a theft provision29.

Copper is the traditional metal in telecom cabling, and its scrap value makes underground and overhead plant a target. The theft is a small crime story, but it points at a recurring operating cost for telcos and cable operators: damaged plant means outages, repair crews, and lost service revenue, and the losses rarely show up as a line item. The Anti-Cable Television and Cable Internet Tapping Act was passed in 2013 to criminalize unauthorized interception of cable services; its use here, alongside theft charges, shows prosecutors treating cable removal as both property crime and service interference.

For the sector, the read is that physical security of the network is part of service reliability. A single manhole on a city street can take out service for a cluster of subscribers, and the recovery of ₱230,000 in cable suggests the operation was not opportunistic. Operators that invest in monitored manholes, cable marking, and coordination with barangay CCTV networks reduce both theft and downtime.

Conversation trajectory

Converge's fourth-quarter and full-year results, due in the first quarter of 2027. The company has committed to 4 to 6 percent revenue growth for 2026; the fourth-quarter filing will show whether the third-quarter improvement Yu cited held through the Christmas season, when consumer spending typically rises. Watch the subscriber number as closely as revenue: another quarter of near-zero net additions would make the guidance harder to defend. Observation window: through the 2026 full-year results release.

The SEC breach investigation and National Privacy Commission review. The SEC is still verifying the origin and scope of the affected records24. The National Privacy Commission can open its own inquiry, and its findings would establish whether the agency's notification and containment met the legal standard. Watch for a follow-up advisory naming the number of affected accounts and the confirmed vector. Observation window: the next two to four weeks.

The 49th ASEAN Summit in Manila. The Philippines is hosting the regional gathering, and a security official has asked protest groups to hold demonstrations after the summit22. Summit weeks concentrate government and business attention on Manila, and telecommunications operators typically reinforce network capacity around venues and delegation hotels. Watch for service-quality complaints or announced network upgrades tied to the event. Observation window: the summit period.

PLDT's enterprise and MSME programs through the fourth quarter. The October cybersecurity sessions and the Palawan training are part of a longer campaign. Watch whether PLDT publishes participation numbers or expands the program to other provinces, which would indicate it is being treated as a customer-acquisition channel rather than a one-off. Observation window: the next quarter.

Trigger events. A confirmed cause in the SEC breach — malware on user devices versus server-side intrusion — would change the advice given to affected users. A Converge guidance cut would signal that household demand has weakened further. A large-scale cable theft or outage in Metro Manila would push physical network security onto the regulatory agenda.

Response guidance

Breach communications. For any organization holding user data, the SEC's advisory is a usable template: state what was and was not affected, name the regulator notified and the date, and tell users what to do next. Avoid the passive construction that leaves the cause vague for weeks; if the vector is unconfirmed, say so and give users device-checking steps in the meantime.

Guidance messaging. Converge's decision to hold its target while citing consumer confidence data is the right structure for a company managing a profit decline: give the number, give the input you are watching, and give the condition under which you would change it. Communicators should prepare the fourth-quarter explanation now, because a flat subscriber number will invite questions about market saturation.

Cybersecurity training. PLDT Enterprise's focus on verification, credential protection, and prompt reporting is the content that works for non-technical audiences. For small businesses, pair it with a concrete scenario — a fake supplier email, a deepfaked voice call from a supposed executive — rather than a list of threat categories.

Community programs. Converge's Nueva Vizcaya delivery worked because it named the schools, the route, and the community leader. For telcos running similar programs, the details are the story; a generic photo opportunity does not travel.

Physical infrastructure. Operators should treat cable theft as a service-reliability issue and coordinate with barangay CCTV networks and local police. Publicizing recoveries and prosecutions under the Anti-Cable Television and Cable Internet Tapping Act can deter repeat attempts.

Sensitive topics. Avoid framing the SEC breach as a test of the agency's competence; the facts so far show containment and timely notification. Avoid presenting ISO certification as a guarantee against breaches; it certifies process, not immunity. And do not use subscriber growth figures without the comparison period, because the 3.1 million number looks very different against 2025's pace than on its own.

See the full picture behind today's signals.

This report draws from Media Meter's MediaWatch, our real-time monitoring engine tracking 2,470+ Philippine sources across print, broadcast, digital, and social. Explore how the platform turns raw coverage into decision-grade intelligence, then see how it's configured for teams like yours — whether you're in PR agencies, corporate comms, government, or marketing.

Want more? Browse our Report Library for sector and crisis intelligence, or request a demo and we'll have your brand set up before the call.