Skip to main content

PayHere data breach

The PayHere breach happened on March 27, 2022 and exposed 1,580,249 accounts. 7 kinds of data were exposed.

Overview

Site
payhere.lk
Breach date
March 27, 2022
Recorded on
May 2, 2022
Accounts exposed
1,580,249
Exposed data
Email addresses, IP addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases
Risk score
61 out of 100

Risk based on the exposed data

This breach scores 61 out of 100. The score is driven mostly by Partial credit card data, Phone numbers, Physical addresses.

The risk score is a guide to how dangerous a breach is, judged by the kinds of data exposed. The number of accounts is not included.

Breaches from the same period

  • Viva Air (2022-03-14, 932,232 accounts)
  • CDEK (2022-03-09, 19,218,203 accounts)
  • E-Pal (2022-04-15, 108,887 accounts)

What affected users should do

  • Passwords were not exposed, but you may receive fake emails aimed at the exposed email addresses.
  • Turn on two-factor authentication for your login.
  • Phone numbers were exposed, so watch out for impersonation by text message or phone call.
  • Card or bank details were exposed, so check your statements and contact your card issuer or bank about any charges you do not recognize.

Create a new password →

This site organizes publicly available information about data breaches. Data as of June 4, 2024. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.