Rewardy Data Breach: 2.2 Million User Records Compromised
In a concerning development for users of the Rewardy platform, a significant data breach has reportedly occurred, affecting millions of individuals. Rewardy, an online “get-paid-to” (GPT) platform, has allegedly been compromised, leading to the potential exposure of sensitive personal information of its users. This breach highlights the ongoing risks associated with digital platforms and the importance of data security.
About Rewardy Data Breach: 2.2 Million User Records Allegedly Stolen
Rewardy has become a popular choice for users looking to earn rewards for completing various digital tasks. However, with the recent breach, approximately 2.2 million user records are now at risk. The compromised database reportedly contains a wealth of sensitive information, including usernames, email addresses, password hashes, and much more. The sheer volume of affected users underscores the severity of this incident.
What Happened
The data breach reportedly took place on December 8, 2025. A threat actor has emerged, claiming to sell a 14GB MongoDB dump that includes the personal and activity information of 2.2 million users on a cybercrime forum. This malicious actor is asking for $1,500 in cryptocurrency (XMR/BTC) for the exclusive rights to this sensitive data. The compromised data includes:
- Usernames and Full Names
- Email Addresses
- Password Hashes (bcrypt)
- IP Addresses (Historical logs with timestamps)
- Country Codes
- Device IDs
- Cryptocurrency Wallet Addresses (e.g., Litecoin withdrawal addresses)
- Transaction IDs and Withdrawal History
- Account Activity Logs (Offers completed, watch time, earnings)
- Account Status (including ban history and reasons)
This breach reveals the vulnerabilities that can exist within online platforms, putting users at risk of identity theft and fraud.
Next Steps
If you believe you may be affected by this data breach, it’s crucial to take immediate action to protect yourself. We encourage you to reach out to us at Srourian Law Firm (SLF) to discuss your options and what steps you can take to mitigate potential damages. Our team is here to provide you with the guidance and support you need during this challenging time.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Rewardy Data Breach: 2.2 Million User Records Allegedly Stolen for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Rewardy Data Breach: 2.2 Million User Records Allegedly Stolen, complete the form below so we can discuss your legal options.
Submit Your Information
