Reported timeline
- March 2026: hackers claimed they obtained data from Paidwork and listed it for sale.
- July 2026: an approximately 11 GB database attributed to Paidwork was posted publicly.
- Have I Been Pwned reports 23.3 million unique email addresses in the database.
- Paidwork told SecurityWeek on July 22, 2026 that it had no confirmed evidence its systems or user accounts were compromised and had escalated the report to its security team.