GCash says no data breach found, systems remain secure

Insider Spotlight

• GCash says forensic probe found no breach in its systems
• Firm says the data being circulated did not originate from GCash 
• Dataset on the dark web does not match company records
• Regulators, including BSP and NPC, informed and involved

Mobile wallet giant GCash said its investigation found no evidence of a data breach following reports that alleged user information was being sold on the dark web.

In a statement on Monday, Oct. 27, 2025, GCash’s corporate communications and public affairs unit said a forensic analysis of its systems confirmed that the platform remains secure and that the dataset circulating online did not come from GCash.

“Initial findings show that the alleged dataset does not match the data structure used within GCash systems,” the company said. “Further analysis reveals that it includes individuals who are not GCash users, and that many entries appear incomplete, inconsistent, or invalid.”

The company emphasized that all customer accounts and funds remain secure, adding that the integrity of its systems was not compromised.

Regulators tapped

GCash said it is coordinating with the Bangko Sentral ng Pilipinas (BSP), the National Privacy Commission (NPC), and the Cybercrime Investigation and Coordinating Center (CICC) to verify the authenticity of the claims and assess information from all possible sources.

“We continue to work closely with the BSP, NPC, and CICC to validate information from all possible sources and ensure that our systems remain protected,” it said.

Users urged to stay vigilant

The company reminded users to report any suspicious activity only through official GCash channels, such as the GCash Help Center or its in-app chatbot “Gigi,” and to call its hotline at 2882 if necessary.

“We urge users to remain vigilant and to report any suspicious activity only through official GCash channels,” the company said.

GCash reaffirmed its commitment to safeguarding customer data and maintaining trust among its millions of users.

“GCash remains fully committed to safeguarding customer data, strengthening our defenses, and upholding the trust of millions of Filipinos,” the firm said. 

— Edited by Daxim L. Lucas