Microtask Data Breach Exposes 23M Accounts

A substantial data breach linked to the microtask platform Paidwork has come to light, potentially compromising over 23 million accounts. Information allegedly obtained from the platform, amounting to nearly 11 GB, surfaced publicly in July 2026. This data includes a vast array of personal details, such as names, phone numbers, physical addresses, and dates of birth.

Concerns are heightened by the reported inclusion of financial records, with bank account numbers, transaction details, and payout histories allegedly exposed. Passwords stored as bcrypt hashes were also found within the leaked files. This extensive compromise poses a significant risk to users who may have exchanged personal information for small online earnings.

Cybersecurity experts warn that the exposed data can be exploited for sophisticated phishing attacks and credential stuffing due to password reuse. Users are advised to change their Paidwork passwords and any other accounts where the same credentials were used. Security measures such as two-factor authentication and credit freezes are recommended to mitigate potential fraud.

Paidwork has stated it is investigating the reported breach and taking steps to protect affected accounts. The incident underscores the importance of carefully considering the information shared with side-income platforms and implementing robust personal cybersecurity practices.