CICC: GCash data leak likely involves recycled info

The Cybercrime Investigation and Coordinating Center (CICC) stated that the alleged data leak involving GCash was not from the company's systems and likely involved recycled information.

The CICC launched an investigation following reports of a dark web post offering GCash account numbers, linked bank accounts, virtual cards, and KYC records, including personal details and IDs.

The National Privacy Commission (NPC) also initiated its own probe into the alleged data breach, which was attributed to a threat actor known as 'Oversleep8351'.

GCash's initial forensic analysis indicated no compromise of its systems.

The CICC's assessment suggests the data shared online by the threat actor is likely older or previously leaked information that has been re-circulated.