Paidwork Data Breach Exposes 23 Million Users’ Banking and Personal Data

A massive data breach at Paidwork exposed sensitive banking, personal, and account data for over 23 million users — including bank account numbers, payout history, names, addresses, emails, phone numbers, device/IP data, profile photos, and bcrypt-hashed passwords — after threat actors sold the dataset in March 2026 and approximately 11GB was publicly leaked in July, heightening risks of targeted phishing, financial fraud, identity theft, and account takeover.