GCash, the Philippines' dominant fintech platform and celebrated 'double unicorn', is barrelling towards one of the market's most anticipated initial public offerings (IPO). But a dark shadow now looms over its ambitions: a massive cache of alleged user data has surfaced for sale on a dark web forum.
A user named 'Oversleep8351' posted the listing, claiming to possess records spanning from 2019 to October 2025. The data allegedly includes sensitive eKYC (Know Your Customer) information, linked bank accounts, and GCash numbers.
