Breach Intelligence

In late March 2022, the Sri Lankan payment gateway PayHere experienced a significant data breach. The platform, which facilitates online payments for merchants and businesses, reportedly had more than 65GB of payment records exposed. The breach affected over 1.5 million unique email addresses. Among the compromised data were names, phone numbers, geographic locations, IP addresses, purchase histories, and partially obfuscated credit card details, including card type, the first six and last four digits, and expiry dates. Additional exposed information is believed to include social media profiles, government-issued identification numbers, birthdates, and business-related information.