GCash cleared of data breach

MANILA, Philippines — The government’s anti-cybercrime unit yesterday cleared GCash from the possibility of a data breach following claims that datasets from the e-wallet are being sold on the dark web.

The Cybercrime Investigation and Coordinating Center (CICC) conducted a probe into the alleged data leak, concluding that the datasets in question did not come from GCash.

“Findings suggest that there has been no recent compromise of GCash’s infrastructure. In support of ongoing verification efforts, GCash has expressed openness to system checks by the CICC to ensure that no potential points of compromise exist,” the anti-cybercrime agency said.

The CICC believes that the datasets posted online were old and recycled details, which means that the hacker reused the datasets to promote them as newly compromised materials on the dark web.

Deep Web Konek, which reports data leaks in the Philippines, recently flagged a supposed sale of personal information from GCash on the dark web by a user named Oversleep8351.

The post claimed that it has records of about eight million GCash users between 2019 and 2025, with datasets covering personal details, bank accounts and e-wallet numbers.