27/10/2025
(October 28)
UPDATE: The alleged GCash data leak forum post has been taken down. According to reports also, the Cybercrime Investigation and Coordinating Center (CICC) has also cleared GCash of any breach.
: GCash User Data Allegedly Sold on Dark Web — Millions of Accounts Affected
A data leak allegedly involving G-Xchange/GCash has surfaced on a dark web forum. The post, made by a user named Oversleep8351, claims to be selling records from 2019 up to October 2025, including eKYC (Know Your Customer) information, linked bank accounts, and GCash numbers.
According to the listing, the data includes both merchant and basic users — with personal details such as names, addresses, employment, and even valid Philippine IDs. The seller claims the dump contains up to 7–8 million users, offered in bundles priced up to $25,000, payable only through Monero (XMR) cryptocurrency.
The forum post states that all data is “unorganized,” meaning it must be sorted manually, and that the seller will only deal with “existing buyers” from previous dark web transactions.
If confirmed, this would be one of the largest alleged data leaks involving a Philippine fintech company to date.
📰 Read the full story in the comment section.
