More than 23 million accounts from the gig-economy platform Paidwork were exposed, according to Have I Been Pwned. The incident dates to March 2026, and an approximately 11GB dataset was published openly in July 2026. It includes user profiles, banking details and worker payout histories, plus passwords — those at least as bcrypt hashes rather than plain text. Notably, Paidwork has not publicly acknowledged the incident. If you had an account there, change the password and keep an eye on the bank account involved.
Reported affected: 23.272.765 / 23,272,765
Source: Have I Been Pwned ↗
Free, no signup. Runs against real breach databases.
You can require the company to tell you exactly what data it has about you, and give you a free copy. It has one month to answer.
You can require them to erase your personal data. Also one month, also free of charge.
If they ignore you or refuse without valid grounds, you can file a free complaint. Regulators can investigate and fine.
A leaked email and phone number don't just sit in one dump — data brokers buy breach data, merge it with public records, and resell it. That's why the spam calls and phishing texts keep coming months later. Deleting your data from the breached company is only the first step; getting it out of the broker network is what actually stops the follow-on damage.
Privora sends legally-backed GDPR erasure requests across the whole network, then re-checks so it stays gone.