Privacy Commission probes cash-loaning application Cashalo over data security issue

Marje Pelayo   •   February 23, 2021   •   390

MANILA, Philippines — The National Privacy Commission (NPC) is investigating reports of alleged data breach on the cash-loaning application Cashalo, operated by Oriente Express Techsystem Corporation.

Based on the agency’s preliminary probe on the data security issue, the post of data-dumping of the said application on the dark web has been on different cyber forums since February 14, 2021. 

A certain user under “creepxploit” sells data of 3.3 million users of Cashalo containing their usernames, passwords, e-mail addresses, phone numbers and device identifications on the dark web as shared in a post on and RaidForums – even provided sample data for potential buyers. 

Given the facts of the report, the user may have successfully downloaded files from the database of the application, which is still up for sale as of February 22, 2021, the NPC said. 

NPC reached out to Cashalo through their data protection officer to coordinate this incident and required them to provide additional information. 

Likewise, the Commission received the breach report file by Cashalo via email last February 19, 2021 at 9:58PM. 

In line with this, NPC is addressing the public that from this breach notification received, the Commission intends to do further monitoring and investigation in cooperation with the parties involved — upholding its mandate in protecting personal information of data subjects.  


The Philippine Broadcast Hub

UNTV, 915 Barangay Philam,

EDSA, Quezon City M.M. 1104

(+632) 8396-8688 (Tel) (General inquiries)


UNTV is a major TV broadcast network with 24-hour programming. An Ultra High Frequency station with strong brand content that appeal to everyone, UNTV is one of the most trusted and successful Philippine networks that guarantees wholesome and quality viewing experience.