A database stolen from Paidwork in March 2026 surfaced on a cybercrime forum in April and became public on July 19, when Have I Been Pwned confirmed the breach hit more than 23 million accounts, according to Help Net Security and Malwarebytes. The 11GB file includes bank account numbers, government ID details, and bcrypt hashed passwords tied to the widely downloaded microtask app.

More From Gblock