What was exposed, when it happened, and which databases confirm it.
- accounts
- 569,286
- Breached
- December 15, 2016
- Last Update
- December 17, 2016
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In December 2016, an attacker breached PayAsUGym's website exposing over 400k customers' personal data. The data was consequently leaked publicly and broadly distributed via Twitter. The leaked data contained personal information including email addresses and passwords hashed using MD5 without a salt.
Compromised Info
- Browser user agent details
- Email addresses
- IP addresses
- Names
- Partial credit card data
- Passwords
- Phone numbers
- Website activity
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the PayAsUGym breach?
The PayAsUGym breach exposed: Browser user agent details, Email addresses, IP addresses, Names, Partial credit card data, Passwords, Phone numbers, and Website activity.
When did the PayAsUGym breach happen?
The PayAsUGym breach was disclosed on December 15, 2016 and affected 400,260 records.
Am I affected by the PayAsUGym breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the PayAsUGym leak.