MANILA, Philippines – Do you often use a mobile wallet to transfer funds, pay bills, or shop online? You might want to stay alert, as the National Privacy Commission (NPC) has launched an investigation into a suspected data breach involving GCash operator G-Xchange Inc.
 |
| Photo courtesy: NPC and GCash/Facebook |
The company, however, has refuted the allegations, assuring users that its systems remain secure.
According to multiple reports, the NPC, responsible for ensuring the Philippines’ adherence to international data protection standards, said its Complaints and Investigation Division has issued a notice to G-Xchange Inc. to explain and provide details regarding the incident.
The inquiry comes after a post on the dark web allegedly made by a “threat actor” using the alias “Oversleep8351,” who was reportedly offering GCash account numbers, linked bank and virtual card details, and know-your-customer (KYC) records containing names, addresses, employment information, and valid Philippine IDs.
GCash addressed the issue in an official statement released on its Facebook page on Monday, October 27.
“NO EVIDENCE OF DATA BREACH. Your funds and information are safe and secure,” they said.
“GCash is aware of an online post alleging that user information is being sold on the dark web.”
“There is no evidence of any breach in GCash systems. All customer accounts and funds remain secure.”
“Upon swift investigation of our cybersecurity experts, the alleged dataset does not match data from GCash systems. Additionally, many entries are incomplete, invalid, or do not belong to GCash users.”
“These findings strongly indicate that the data being circulated did not originate from GCash. We continue to work closely with the BSP, NPC, and CICC to monitor and validate information from all possible sources and ensure that our systems remain protected.”
“GCash remains fully committed to safeguarding customer data, strengthening our defenses, and upholding the trust of millions of Filipinos,” they added.
— The Summit Express