E-wallet giant GCash said the accounts and funds of all its customers are safe, reiterating that its systems were neither compromised nor affected by any breach or leak.
In a statement on Wednesday, Oct. 29, GCash said the personal information of its users remains secure despite a post on a dark web forum claiming a massive data leak.
The post claimed to be selling highly sensitive information linked to GCash accounts, including names, addresses, and employment details.
The alleged data leak reportedly covered information from up to eight million users of the mobile wallet.
GCash said the post has since been deleted, confirming the assessment of the government’s anti-cybercrime unit.
“The supposed leak was fake and involved recycled information from a previous, unrelated incident,” it said.
Based on its investigation, the Cybercrime Investigation and Coordinating Center (CICC) said the alleged data leak circulating online appeared to be “recycled information.”
This means that the information was old or previously available data that had been “reused or reshared” to appear as newly compromised material.
The CICC said this confirms that the data in question did not originate from GCash’s systems, thereby proving that there has been no recent compromise.
Department of Information and Communications Technology (DICT) Secretary Henry Aguda echoed the sentiment, noting that the mobile wallet remains safe and secure.
GCash has since reminded the public to avoid reposting unverified information online and instead rely only on official channels for accurate updates.
The company said it is prepared to pursue legal action against individuals or groups spreading malicious or false claims that cause public confusion and undermine user trust.
“Our commitment to customer safety and data security is absolute,” GCash said.
“We thank the DICT and CICC for their leadership and partnership in ensuring a safe and secure digital financial ecosystem for all Filipinos,” it added.