Geline Salac

GCash data breach on Dark Web is fake news, says info security exec

Article (news)

ABS-CBN News

David Dizon

Nothing but fake news. This is how a GCash chief information security officer described rumors that a threat actor was selling merchant and basic user data of G-Xchange, Inc., operator of GCash, on the Dark Web last October 26.“Fake news ito. Walang katotohanan ito. Walang breach. Walang leaks. As always, GCash accounts are always safe and secure,”  GCash chief information security officer Miguel Geronilla said in a DZMM interview.Geronilla noted both the Department of Information and Communications Technology and the Cybercrime Investigation and Coordinating Center have confirmed there was no data leak of GCash user information.He reminded the public not to share their MPINs and one-time-passwords, and to be careful about sharing their cellphones with strangers.“[Maging] mapanuri, mag-ingat, was basta ibibigay ang mga credentials. Wag ding basta-baa magki-click ng mga link. Wag basta maglagay ng personal na datos online,” he said.The fintech giant  earlier debunked a post on a dark web forum that a threat actor has been selling GCash records which include eKYC (Know Your Customer) information, linked bank accounts, and GCash numbers.The data allegedly comprised records from 2019 up to October this year, and included both merchant and basic users with personal details such as names, addresses, employment, and even valid Philippine IDs.GCash, however, said the alleged dataset “does not match the data structure used within GCash systems. Further analysis reveals that it includes individuals who are not GCash users, and that many entries appear incomplete, inconsistent, or invalid.&quot;

Nothing but fake news. This is how a GCash chief information security officer described rumors that a threat actor was selling merchant and basic user data of G-Xchange, Inc., operator of GCash, on the Dark Web last October 26.

Nothing but fake news. This is how a GCash chief information security officer described rumors that a threat actor was selling merchant and basic user data of G-Xchange, Inc., operator of GCash, on the Dark Web last October 26.