PayAsUGym

Disclosed Dec 17, 2016400,260 accountsUnverified

In December 2016, an attacker breached PayAsUGym's website exposing over 400k customers' personal data. The data was consequently leaked publicly and broadly distributed via Twitter. The leaked data contained personal information including email addresses and passwords hashed using MD5 without a salt.

What is known

People affected	400,260 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Dec 17, 2016
Happened	Dec 15, 2016
Attack	Not stated
Data exposed	EmailsIP addressesNamesPayment cardsPasswordsPhone numbers
Sector	Tech
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: PayAsUGym

Notices filed

Accounts in the dataDec 17, 2016

Have I Been Pwned400,260 people

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about PayAsUGym