PayHere
Disclosed May 2, 20224 years ago1,580,249 accountsUnverified
In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses. The data also included IP and physical addresses, names, phone numbers, purchase histories and partially obfuscated credit card data (card type, first 6 and last 4 digits plus expiry date). A month later, PayHere published a blog on the incident titled Ensuring Integrity on PayHere Cybersecurity Incident .
What is known
| People affected | 1,580,249 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | May 2, 2022 |
| Happened | Mar 27, 2022 |
| Attack | Not stated |
| Data exposed | Emails, IP addresses, Names, Payment cards, Phone numbers, Addresses, Financial |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: PayHerehaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | May 2, 2022 | 1,580,249 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.