Paidwork Data Breach Investigation: More Than 23 Million Users Reportedly Affected Featured
Personal, banking, transaction, and account information was reportedly included in a database posted online in July 2026.
eClassActions.com is investigating a reported data breach involving Paidwork LLC, an online gig-economy platform that allows users to earn money by completing surveys, watching videos, playing games, shopping online, testing applications, and performing other digital tasks. Paidwork’s terms identify the company as Paidwork LLC and list its registered address in Sacramento, California.
What Happened?
According to Have I Been Pwned, hackers claimed in March 2026 that they had obtained information from Paidwork and offered it for sale. Almost 11 gigabytes of data allegedly obtained from the platform were subsequently posted publicly in July 2026. Have I Been Pwned added the incident to its database on July 19, 2026, reporting that approximately 23.3 million accounts were affected.
Help Net Security reported the more precise total as 23,272,765 users. The publication reported that the database had previously been advertised on a cybercrime forum as information taken from Paidwork’s production systems.
Paidwork had not publicly acknowledged the alleged breach as of July 20, 2026, according to both Help Net Security and The Register. The precise method used to access the information, whether Paidwork has notified affected users, and what remedial measures the company has taken have not been publicly confirmed.
What Information Was Reportedly Exposed?
Have I Been Pwned reports that the compromised information included:
- Names, email addresses, and telephone numbers
- Physical addresses and dates of birth
- Gender, education levels, and personal interests
- Bank account numbers and financial transactions
- Worker payout histories
- IP addresses and device information
- Profile photographs
- Passwords stored as bcrypt hashes
Bcrypt is intended to make passwords more difficult to recover than passwords stored in plain text or protected by weaker hashing methods. Nevertheless, weak passwords may still be vulnerable, particularly when the same password has been reused for other accounts.
Why Does This Breach Matter?
The reported dataset combines identity, contact, login, and banking information. This combination could increase the risk of targeted phishing messages, attempted account takeovers, impersonation, and financial fraud. Paidwork users should be cautious about unexpected emails, text messages, or telephone calls referring to their accounts, earnings, withdrawals, or banking information.
What Should Paidwork Users Do?
The Federal Trade Commission recommends immediately changing a password affected by a breach, as well as any identical or similar password used on another account. Users should also enable multifactor authentication where available.
Because bank account information was reportedly involved, users should regularly review their transactions and contact their bank or financial institution if they identify unfamiliar activity. The FTC also advises consumers whose banking information was exposed to consider closing the affected account and opening a new one.
Join the Paidwork Data Breach Class Action Investigation
You may be affected if you currently maintain, or previously maintained, a Paidwork account. Preserve any notice, email, screenshot, suspicious communication, bank record, or other document that may relate to the incident.
eClassActions.com is investigating potential legal claims on behalf of affected Paidwork users. Please complete the confidential form on this page to provide information about your experience and request a review of your potential legal rights.
Submitting the form does not guarantee that you have a claim and does not create an attorney-client relationship.