Gig platform Paidwork landed on Have I Been Pwned after hackers claimed the company’s data in March 2026 and a roughly 11GB dump surfaced publicly in July. HIBP indexed about 23.3 million unique email addresses on 19 July 2026.
CyberNews reporting on the sale described names, phone numbers, addresses, dates of birth, banking details, payout history, and bcrypt password hashes—exactly the mix you do not want sitting next to each other in one CSV.
What happened
The breach window HIBP lists is March 2026; public publication lagged by months—a pattern HIBP users increasingly see in 2026 forum dumps. Paidwork had not posted a matching customer notice at HIBP load time.
Who is at risk
Anyone who earned through Paidwork or linked a payout bank account. Expect payout-themed phishing and credential-stuffing against reused passwords.
Action items
- Check HIBP and rotate your Paidwork password; enable MFA if offered.
- Watch the bank account used for payouts for unauthorized transfers.
- Do not trust “Paidwork security verification” links in SMS or email.
Canonical record
https://breachhistory.com/paidwork/paidwork-forum2026 — HIBP, CyberNews.