On Reports of an Alleged Data Breach Involving G-Xchange, Inc. (GCash)

On October 27, 2025, the National Privacy Commission (NPC) of the Philippines urged the public to be vigilant following reports of a data leak involving G-Xchange, Inc., operator of GCash. A dark web post claimed to sell user information, including merchant data, GCash account numbers, and KYC records. The NPC has launched an investigation and issued a Notice to Explain to G-Xchange, Inc. As of October 27, 2025, no official data breach notification has been received from the company.

Users are advised to monitor their accounts and enhance security measures. GCash has denied any breach, stating that the data in question does not match their systems.