Paidwork

• Passwords

  Whoever has it can do everything you can do in this account — use a card saved on it, change your plan, read whatever you keep there. And if you used it anywhere else, those accounts too.

  Do this now

  • Change your password on Paidwork
  • Change it on every other site where you used the same one Password managers →
  • Turn on two-factor authentication wherever it is offered Two-factor authentication →

• Bank details (IBAN)

  It identifies your bank, which is exactly what a caller pretending to be your adviser needs.

  On its own, usually not enough to initiate a transfer on your behalf.

  Fake adviser calls →

• Phone number

  Used for calls and texts that open already knowing who you are.

  Fake adviser calls →

• Financial records

  What you paid, to whom and when — enough to build a believable story about an account you hold.

• Postal address

  Used to stage a delivery, a utility visit or a neighbour that never happened.

  Social engineering →

• Date of birth

  Used to clear the “confirm your identity” step on a call you did not make.

  Identity theft →

• Email address

  The address every one of these scams will arrive at.

  Phishing →

• Photos

  A face or an ID photo makes an impersonation look real on a support call or a new account.

• Name

  Used to make a cold approach look like a conversation already under way.

  Social engineering →

• Education

  Where and when you studied — a detail that makes a stranger sound like they know you.

• Device details

  A technical fingerprint of your device. Little direct risk.

• Demographic details

  Age, gender and the like. Relatively harmless on their own.

• Card numbers
• Identity documents
• Security answers

The record shows what was found in the data. Not listed is not the same as proven untouched.