# Paidwork Data Incident Claims Full LLM Context

> Expanded generated context for paidworkclaims.com. Investigating party: Hall Attorneys, P.C.

The site is a Paidwork-specific plaintiff intake and secure evidence workspace. It does not publish stolen data, affected-person lists, credentials, or confirmation that any named person was affected.

## Canonical Resources

- [Root llms.txt](https://paidworkclaims.com/llms.txt)
- [Human intake](https://paidworkclaims.com/)
- [Incident summary](https://paidworkclaims.com/data-security-event)
- [Evidence checklist](https://paidworkclaims.com/evidence-checklist)
- [FAQ](https://paidworkclaims.com/faq)

## Incident Status

- Hackers claimed in March 2026 that they obtained Paidwork data.
- An approximately 11 GB database attributed to Paidwork was published in July 2026.
- Have I Been Pwned identified 23.3 million unique email addresses and reports profile, banking, payout, transaction, address, birth-date, phone, IP, and bcrypt password-hash data.
- Paidwork told SecurityWeek on July 22, 2026 that it had no confirmed evidence its systems or user accounts were compromised and had escalated the report for investigation.
- These facts support describing the incident as reported or alleged while Paidwork's investigation remains unresolved.

## Intake Focus

- Whether the submitter controls the email used for a Paidwork account.
- Whether the submitter was a task worker, account holder, former user, advertiser, employee, or another user.
- Account creation, task, earning, balance, withdrawal, PayPal, bank-transfer, referral, and support history.
- A second proof of relationship: dashboard, task, payout, Paidwork email, policy, or reputable breach-match record.
- Broad possible data categories without requesting the sensitive values themselves.
- Password reuse, phishing, unexpected account access, identity or financial issues, lost earnings, time, expenses, and distress.
- The version and acceptance facts for Paidwork's terms, which currently identify AAA arbitration and a class-action waiver.

## Routing And Consent

- Hall Attorneys, P.C. is hard-coded as the investigating party.
- The endpoint rejects intake if the configured breach record is not assigned to Hall Attorneys' exact identifier.
- Consent to store and share the intake with Hall Attorneys is required.
- No email or code verification is required; Hall Attorneys reviews relationship evidence and identity information before a matter is filing-ready.
- Submission is not representation, claimant acceptance, or a guaranteed filing.

## Safety And Privacy

- Never request passwords, one-time codes, full bank or routing numbers, full card numbers, or government identifiers.
- Never request stolen database records or credentials sourced from criminal forums.
- Forwarded emails are supporting evidence, not conclusive authentication; preserve original headers when possible.
- Require two independent relationship proofs before a matter is filing-ready.
- Keep Paidwork's statement separate from third-party database analysis.