Personal Data Leak Monitor

PayHere data breach

1.58M accounts from PayHere (payhere.lk) were exposed in this breach. Besides email addresses, it included partial credit card data, which makes it a high-risk breach.

Breach date
March 27, 2022
Accounts
1,580,249
Added to the database
May 2, 2022

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Email addressesIP addressesNamesPartial credit card dataPhone numbersPhysical addressesPurchases

What to do now

  1. Call your card company and inspect for charges you don't recognise
  2. Do not tap links in emails claiming to be that service
  3. Expect scam emails that use your real name
  4. Be alert to fake delivery or unpaid-bill texts and calls
  5. Be careful with unexpected mail or visitors

Tools that help with this breach

Norton 360PaidVisit the official site →(opens in a new tab)ESETPaidVisit the official site →(opens in a new tab)

About this breach

In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses. The data also included IP and physical addresses, names, phone numbers, purchase histories and partially obfuscated credit card data (card type, first 6 and last 4 digits plus expiry date). A month later, PayHere published a blog on the incident titled Ensuring Integrity on PayHere Cybersecurity Incident.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period