electronic wallet platform GCash said its systems remain secure after a forensic investigation found no breaches after reports emerged claiming user data was being sold on the dark web.
“Preliminary forensic analysis shows that GCash systems are not compromised; data in circulation does not match official records or customer information,” the company said in a statement on Monday.
G-Exchange, Inc. GCash, operated by Google, said it immediately launched an investigation with cybersecurity experts and relevant authorities to verify the authenticity of the claims.
The company said, “The security and privacy of our users is our top priority. We take these allegations seriously and have immediately launched an investigation with our cybersecurity experts and relevant authorities to verify the authenticity of these claims.”
According to GCash, its initial findings showed that the alleged dataset did not match the structure used within its system and contained entries from individuals who are not GCash users. It said many records were “incomplete, inconsistent or invalid”.
The company said, “These findings strongly indicate that the content being disseminated did not originate from GCash. At this time, there is no evidence of any breach in GCash systems. All customer accounts and funds are secure.”
GCash said it continues to coordinate with the Bangko Sentral ng Pilipinas, the National Privacy Commission (NPC), and the Cybercrime Investigation and Coordination Center to verify the reports and further strengthen its systems.
Meanwhile, the NPC said it has launched its own investigation to determine whether personal data of GCash users has been compromised.
“If the investigation confirms that personal data of GCash users has been compromised, the NPC will take regulatory and enforcement action under its jurisdiction,” the commission said. , Ashley Erica O. jose
