Philippines: Concluded NPC investigation regarding a potential breach of personal data involving compromised accounts on the mobile application GCash

On 24 May 2023, the National Privacy Commission (NPC) concluded its investigation of a potential breach of personal data involving compromised accounts on the GCash mobile application. The NPC determined that the unauthorized GCash transactions stemmed from phishing attacks, particularly through gambling sites. GCash's operator, GXI, complied with NPC orders to enhance user education and security measures. The NPC affirmed its commitment to penalizing violations of the Data Privacy Act and promoting digital safety.