This is AI generated summarization, which may have errors. For context, always refer to the full article.
NPC probes G-Xchange over an alleged data breach involving mobile wallet GCash after a dark web post appeared offering user data for sale
MANILA, Philippines – The National Privacy Commission (NPC) has launched an investigation into an alleged data breach involving G-Xchange Incorporated, operator of mobile wallet GCash, after a dark web post surfaced on Sunday, October 26, claiming to sell user information.
According to the NPC, the post by a user under the alias “Oversleep8351” allegedly offers GCash account numbers, merchant and user data, linked bank and virtual card details, and Know Your Customer (KYC) records containing names, addresses, employment details, and valid IDs.
The NPC’s Complaints and Investigation Division has issued a Notice to Explain to G-Xchange and scheduled an online conference to gather more details. As of Monday, October 27, the company has yet to file an official data breach notification.
The agency reminded GCash users to monitor their accounts, update MPINs and passwords, enable extra security features, and stay alert against phishing scams. It also urged the public not to share unverified claims while the probe continues.
Gcash statement
GCash later released a statement on the alleged breach, saying there was no such evidence for the incident.
In its Facebook post, it said, “Your funds and information are safe and secure. GCash is aware of an online post alleging that user information is being sold on the dark web. There is no evidence of any breach in GCash systems. All customer accounts and funds remain secure.”
The online wallet said it immediately investigated the matter, finding that the leaked data does not match those from their systems.
“Upon swift investigation of our cybersecurity experts, the alleged dataset does not match data from GCash systems. Additionally, many entries are incomplete, invalid, or do not belong to GCash users. These findings strongly indicate that the data being circulated did not originate from GCash.”
The company said it is closely working with government agencies to “monitor and validate information from all possible sources and ensure that our systems remain protected.” – Rappler.com