Paidwork Data Breach Exposes Banking Details of 23.3 Million Users
A massive leak of financial and personal data from the gig economy platform puts millions of freelance workers at risk of fraud.
The global gig economy platform Paidwork has suffered a massive data breach affecting approximately 23.3 million users. The exposure of sensitive financial and identity data marks a significant security failure for a platform that manages payouts for freelance workers worldwide.
According to reports from Cyber Security News and Have I Been Pwned, the breach first surfaced in March 2026 when threat actors claimed to have stolen the data and listed it for sale. By July 2026, nearly 11GB of the dataset was leaked publicly on dark web forums. The breach was officially indexed by the security service Have I Been Pwned on July 19, 2026.
The compromised records are extensive, including bank account numbers, financial transactions, names, email addresses, phone numbers, and physical addresses. Additionally, the leak exposed dates of birth and bcrypt-hashed passwords. Paidwork operates as a micro-task platform where users earn money by watching videos, playing games, and taking surveys, requiring the company to store sensitive banking information to facilitate user payouts.
The Risk of Financial Exploitation
This breach is particularly severe because it pairs high-volume personal identity information with direct banking details and payout histories. Unlike standard leaks that only expose emails or passwords, the inclusion of bank account numbers allows attackers to move beyond simple account takeovers. Security experts warn that this specific combination of data enables highly targeted phishing campaigns, identity theft, and direct financial fraud against gig workers who may already be in precarious financial positions.
Future Outlook
Users are encouraged to monitor their financial statements for unauthorized activity and update passwords across any services that shared the same credentials. While the data has been indexed by Have I Been Pwned, the full extent of how the breach occurred remains a primary concern for the industry. The incident highlights the growing risk faced by gig economy platforms that centralize both identity and payment data for a global, decentralized workforce.