PayAsUGym data breach

The PayAsUGym breach happened on December 15, 2016 and exposed 400,260 accounts. 8 kinds of data were exposed.

Overview

Site

payasugym.com

Breach date

December 15, 2016

Recorded on

December 17, 2016

Accounts exposed

400,260

Exposed data

Browser user agent details, Email addresses, IP addresses, Names, Partial credit card data, Passwords, Phone numbers, Website activity

Risk score

81 out of 100

Risk based on the exposed data

This breach scores 81 out of 100. The score is driven mostly by Passwords, Partial credit card data, Phone numbers.

Breaches from the same period

• Anti Public Combo List (2016-12-16, 457,962,538 accounts)
• Ethereum (2016-12-16, 16,431 accounts)
• Data Enrichment Records (2016-12-23, 8,176,132 accounts)

What affected users should do

• Change your PayAsUGym password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
• Turn on two-factor authentication for your login.
• Phone numbers were exposed, so watch out for impersonation by text message or phone call.
• Card or bank details were exposed, so check your statements and contact your card issuer or bank about any charges you do not recognize.

Create a new password →