Hall Attorneys Files Class Action Against Paidwork Over Reported Data Breach
E.D. Cal. complaint alleges Paidwork failed to safeguard users' sensitive information and provide timely notice before users allegedly suffered account-takeover and financial harm.
Attorney Advertising. The complaint contains allegations only; no findings have been made. Do not send confidential information unless through a secure channel.
Austin, Texas – July 25, 2026 – Hall Attorneys, P.C. and Ahdoot & Wolfson, P.C. filed a putative class action on against Paidwork LLC in the Sacramento Division of the U.S. District Court for the Eastern District of California. The complaint alleges Paidwork failed to use reasonable safeguards to protect users' sensitive information and failed to provide prompt and adequate notice after that information was allegedly accessed and disclosed without authorization.
According to the complaint, Paidwork operates a global gig-economy and microtask platform through which users create accounts, complete online tasks, track earnings, and designate payment information for withdrawals. The complaint alleges Paidwork collected and retained sensitive user information and that the reported exposure created risks of identity theft, account takeover, phishing, and financial fraud.
The complaint alleges a threat actor claimed to have accessed Paidwork's production environment in March 2026. The information was reportedly offered for sale by early April and later posted publicly in July. Have I Been Pwned reports that the incident involved sensitive user information. Paidwork has reportedly said it is investigating and has not confirmed that its systems or user accounts were compromised.
“The complaint alleges users trusted Paidwork with sensitive information. A user who is not told that information may have been stolen cannot promptly secure related accounts or recognize a targeted account-recovery attack.”
Alleged account takeover and financial misuse
Plaintiff alleges that Have I Been Pwned notified her on July 19 that her Paidwork email address appeared in the reported dataset, after suspicious account activity had allegedly begun. The complaint alleges that a new PayPal account was created in her name and that her financial account was accessed from an unfamiliar device, altered, and used for unauthorized transfers and charges. Plaintiff alleges that she has documented at least CAD $1,166.66 in unauthorized transactions and that Paidwork's alleged delay in providing notice deprived her of the opportunity to secure related accounts sooner.
Proposed classes, claims, and requested relief
The complaint seeks to represent a North American Data Breach Class and an Actual Misuse Subclass. It asserts negligence, breach of implied contract, breach of confidence, restitution and unjust enrichment, and declaratory and injunctive relief.
The requested relief includes damages and an independent security assessment, remediation of alleged vulnerabilities, stronger access controls, data minimization, individualized notice, monitoring, and reasonable identity and account-protection services.
“People should not have to learn from a third-party breach database that a platform holding their sensitive information may have been compromised. This lawsuit seeks compensation for the harm alleged and concrete reforms to reduce the continuing risk described in the complaint.”
Additional proposed representatives
Hall Attorneys is seeking additional proposed class representatives residing in the United States, especially California residents, to represent U.S. users and potential state-specific claims. Current or former U.S. Paidwork users should contact the firm if Have I Been Pwned identified their email or if they experienced suspicious logins, password resets, phishing, unauthorized account activity, identity theft, financial loss, or substantial mitigation time after March 2026.
In an initial message, provide your state, when you used Paidwork, whether Have I Been Pwned identified your email, and a brief description of suspicious activity or loss. Do not send passwords, authentication codes, complete account numbers, government identification, or unredacted financial records.
Go to www.hallattorneys.com/paidwork-data-breach.
For a copy of the complaint, go to: www.hallattorneys.com/dockets/paidwork.
Do not delete your Paidwork registration emails, Have I Been Pwned notice, account and profile screenshots, password-reset emails, unfamiliar-login alerts, phishing messages, bank or payment-service alerts, transaction records, or records of the time and money you spent responding. Preserve everything and contact Hall Attorneys immediately.
Important Documents
- Case overview: Paidwork data breach class action
- Filed complaint: Read the complaint →
- Press release (PDF): Download the release →
—Attorney Nicholas Hall is with Hall Attorneys, a Texas-based law firm focused on complex litigation. He can be found on X at @nicholashall or at www.hallattorneys.com.
Inquiries: nhall@hallattorneys.com
