Paidwork breach exposes sensitive data of 23 million user

Key Points:

• A significant data breach at Paidwork has exposed sensitive information of over 23 million users, including personal details and financial data.
• The leaked database contains full names, email addresses, phone numbers, home addresses, dates of birth, gender, education levels, bank account numbers, and passwords stored as bcrypt hashes.
• Users are advised to change their passwords immediately and enable two-factor authentication (2FA) on all accounts to mitigate potential unauthorized access.

Technical Details: The breach occurred in March 2026 and was publicly advertised in April on a cybercrime forum. The leaked data dump is approximately 11GB in size.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned