The National Privacy Commission (NPC) is investigating an alleged data breach of GCash, the country's leading mobile wallet, after a dark web post claimed to be selling user data.
The alleged data includes GCash account numbers, merchant and user information, linked bank and virtual card details, and Know Your Customer (KYC) records.
The NPC has issued a Notice to Explain to GCash's operator, G-Xchange Incorporated, and is awaiting an official data breach notification from the company.
GCash users are advised by the NPC to monitor their accounts, update security features like MPINs and passwords, and remain vigilant against phishing scams.
🤖
This story was generated by AI to help you understand the key points. For more detailed coverage, please see the news articles from trusted media outlets below.
News Sources
See how different news organizations are covering this story. Below are the original articles from various Philippine news sources that contributed to this summary.





