Paidwork breach exposes sensitive data of 23 million user

Paidwork experienced a data breach impacting an estimated 23,272,765 users after an intrusion in March 2026; an 11GB dataset was later advertised on a cybercrime forum and added to Have I Been Pwned. The exposed records reportedly include full names, emails, phone numbers, home addresses, dates of birth, gender, education, bank account numbers and transaction records, device and IP information, profile photos, personal interests, and bcrypt-hashed passwords; affected users are advised to change passwords, enable 2FA, and use a password manager.