PPA Cybersecurity Page

HEADS UP, GCASH USERS!

The National Privacy Commission (NPC) announced on Monday that an investigation is now underway regarding a reported data leak allegedly involving GCash operator G-Xchange, Inc.

"The NPC has immediately launched an investigation after a dark web post appeared claiming to sell user information. The post, made by a threat actor using the alias 'Oversleep8351,' allegedly offers merchant and basic user data, GCash account numbers, linked bank and virtual card accounts, and KYC (Know Your Customer) records containing names, addresses, employment details, and valid Philippine IDs," the commission said.

While the matter is being verified, the regulator is urging GCash users to take extra measures to secure their accounts.

"GCash users should actively monitor their accounts, regularly update their MPINs and passwords, and enable additional security features to protect their information. They must also remain alert to phishing attempts and refrain from sharing personal or sensitive data while the investigation is ongoing," the NPC added. (Facebook/NPC)