Skip to content
Data breachResolved

PayHere data breach (2022)

In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses.

Victim
PayHere
records
1.6M
SectorFinance

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2022-03-27, PayHere was affected by a data breach. Approximately 1,580,249 accounts were exposed. In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#PayHere
  2. payhere.lkhttps://payhere.lk

Related incidents

Data breachResolved

Gemini data breach (2022)

In late 2022, a hacker posted a data set to a public hacking forum which they alleged was sourced from the Gemini crypto exchange, a claim that was later proven to be false as the data was traced back to an incident at a third-party vendor.

Victim
Gemini
Records
5.3M
Data breachResolved

GunAuction.com data breach (2022)

In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected on the hacker's server.

Victim
GunAuction.com
Records
565.5K
Data breachResolved

CoinTracker data breach (2022)

In December 2022, the Crypto & NFT taxes service CoinTracker reported a data breach that impacted over 1.5M of their customers. The company later attributed the breach to a compromise SendGrid in an attack that targeted multiple customers of the email provider.

Victim
CoinTracker
Records
1.6M
Data breachResolved

Locally data breach (2022)

In October 2022, "The Industry's Leading Online-to-Offline Shopping Solution" Locally suffered a data breach. Whilst Locally acknowledged the breach privately, it's unknown whether impacted customers were subsequently notified of the incident which exposed over 362k names, phone numbers, email and…

Victim
Locally
Records
362.6K