Paidwork Gig Platform Breach Exposes 23 Million Workers' Data and Banking Info

We publish these pages from public notices and reporting so you can understand what was exposed. Everything here is already public. Always confirm with the organization named in your notice.

What happened

According to public breach records, the Paidwork data breach on March 29, 2026 is reported to have exposed the personal information of 23,272,765 user accounts.

In March 2026, hackers claimed they had obtained data from Paidwork, a gig economy platform connecting workers with paid tasks. The attackers initially listed the data for sale on underground forums. Almost 11GB of data was subsequently posted publicly in July 2026, exposing over 23 million unique email addresses.

The breach is significant for gig workers who rely on these platforms for income. The exposed data went far beyond basic contact information—it included banking details, payout histories, and comprehensive profile data that could be used for identity theft and financial fraud.

Gig economy platforms like Paidwork handle sensitive financial data because they need to pay workers. This breach demonstrates how that necessity creates risk: when the platform's security fails, workers' financial information becomes exposed along with their personal data.

The passwords exposed in this breach were stored as bcrypt hashes, which is a reasonably secure method, but users should still consider these passwords compromised and change them immediately.

• Change your Paidwork password immediately, and change it anywhere you reused the same credentials.
• Review your bank account statements for unauthorized transactions, as bank account numbers were exposed.
• Enable two-factor authentication on your Paidwork account and any account sharing that password.
• Watch for phishing emails targeting gig workers, as your email, work history, and payout information could be used to craft convincing scams.
• Consider using a dedicated bank account for gig work platforms to limit exposure of your primary finances.
• Monitor your credit reports for signs of identity theft.

What data was exposed

The following types of personal data were compromised:

• Email addresses
• Names
• Phone numbers
• Physical addresses
• Dates of birth
• Bank account numbers
• Financial transactions
• Payout history for workers
• Device information
• IP addresses
• Education levels
• Personal interests
• Profile photos
• Passwords (bcrypt hashes)
• Genders

Breach details

This summary is compiled from public breach-notification data and known leak databases. Figures reflect what those sources report and may be revised as more is learned. If something here looks wrong or you think your information is involved, contact our support team.

We report breaches as a factual record to help people check their exposure. Inclusion here is not an allegation of wrongdoing or negligence by Paidwork; it reflects a publicly reported security incident.

What to do now

Based on the data exposed in this breach, here are the steps you should take:

• Change your Paidwork password immediately, and change it anywhere you reused the same credentials.
• Review your bank account statements carefully for any unauthorized transactions, as bank account numbers were exposed in this breach.
• Enable two-factor authentication on your Paidwork account and any other account that shares that password.
• Watch for targeted phishing emails, as your email, name, work history, and payout information could be used to craft convincing scams impersonating gig platforms.
• Consider using a dedicated bank account for gig work platforms to limit exposure of your primary finances.
• Monitor your credit reports for signs of identity theft, as dates of birth and addresses were also exposed.
• Be cautious of anyone contacting you claiming to help "recover" your Paidwork account or earnings.