What was exposed, when it happened, and which databases confirm it.
- accounts
- 1,580,249
- Breached
- March 27, 2022
- Last Update
- May 2, 2022
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses. The data also included IP and physical addresses, names, phone numbers, purchase histories and partially obfuscated credit card data (card type, first 6 and last 4 digits plus expiry date). A month later, PayHere published a blog on the incident titled Ensuring Integrity on PayHere Cybersecurity Incident.
Compromised Info
- Email addresses
- IP addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the PayHere breach?
The PayHere breach exposed: Email addresses, IP addresses, Names, Partial credit card data, Phone numbers, Physical addresses, and Purchases.
When did the PayHere breach happen?
The PayHere breach was disclosed on March 27, 2022 and affected 1,580,249 records.
Am I affected by the PayHere breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the PayHere leak.