Data breach
PayHerepayhere.lk
1 580 249 accounts exposed in a breach dated 2022-03-27.
Breached2022-03-27Added to HIBP2022-05-02 UTCUpdated by HIBP2022-05-02 UTCAccounts1 580 249Domainpayhere.lk
Verified
What happened in Have I Been Pwned’s words
In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses. The data also included IP and physical addresses, names, phone numbers, purchase histories and partially obfuscated credit card data (card type, first 6 and last 4 digits plus expiry date). A month later, PayHere published a blog on the incident titled Ensuring Integrity on PayHere Cybersecurity Incident.
Exposed data as HIBP classifies it
- Email addresses
- IP addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC