CICC clears GCash of data breach, says sold datasets were fake

The Cybercrime Investigation and Coordinating Center (CICC) has cleared GCash of a data breach, concluding that the datasets sold on the dark web were fake and did not originate from the e-wallet.

The CICC, under the Department of Information and Communications Technology (DICT), confirmed that GCash's infrastructure was not recently compromised and that the leaked data likely consists of old and recycled information.

GCash has assured its users that their accounts and funds remain safe and secure, as internal checks revealed no evidence of a breach in critical systems.

The dark web post that claimed to have GCash data sets has since been taken down.

The National Privacy Commission (NPC) had previously launched an investigation into the alleged breach and advised users to remain vigilant, while GCash continues to cooperate with the BSP, NPC, and CICC.