This is AI generated summarization, which may have errors. For context, always refer to the full article.<\/p>\n
\n\t\t\t\t\tNPC probes G-Xchange over an alleged data breach involving mobile wallet GCash after a dark web post appeared offering user data for sale\n\t\t\t<\/p>\n
MANILA, Philippines \u2013 The National Privacy Commission (NPC) has launched an investigation into an alleged data breach involving G-Xchange Incorporated, operator of mobile wallet GCash, after a dark web post surfaced on Sunday, October 26, claiming to sell user information.<\/p>\n
According to the NPC, the post by a user under the alias \u201cOversleep8351\u201d allegedly offers GCash account numbers, merchant and user data, linked bank and virtual card details, and Know Your Customer (KYC) records containing names, addresses, employment details, and valid IDs.<\/p>\n
The NPC\u2019s Complaints and Investigation Division has issued a Notice to Explain to G-Xchange and scheduled an online conference to gather more details. As of Monday, October 27, the company has yet to file an official data breach notification.<\/p>\n
The agency reminded GCash users to monitor their accounts, update MPINs and passwords, enable extra security features, and stay alert against phishing scams. It also urged the public not to share unverified claims while the probe continues. <\/p>\n
Gcash statement<\/p>\n
GCash later released a statement on the alleged breach, saying there was no such evidence for the incident. <\/p>\n