Financial transactions leaked: what it means and what to do

Risk level: high. Can you change it: no. Found in 4 breaches in this directory.

What this data is

Records of payments into and out of your accounts: dates, amounts, merchants, payees, references and sometimes locations, held by banks, payment apps, accounting software and budgeting tools.

The risk on its own

A transaction history is a detailed map of your life: where you shop, eat and travel, who you pay rent to, which doctor you see, what you subscribe to and when you get paid. It cannot be used to make a payment. Many people would still find it more invasive than a password leak.

The risk combined with other data

With your name and account details it lets scammers pose as your bank or a regular payee with convincing detail, such as your last payment to a named company. It shows who you pay regularly, which makes payment redirection easy, and when your salary lands. Payments to clinics, lawyers or political and religious groups reveal sensitive facts about you.

How criminals use it

  • A fake bank caller quotes your recent purchases to prove who they are, then asks you to read out a code.
  • A scammer poses as your landlord or a regular supplier and asks for the next payment to go to a new account.
  • Payments to a clinic, counsellor or lawyer reveal private circumstances that are then used for extortion.
  • Spending patterns show when you are travelling and your home is empty.

What to do now

  1. Change your banking or payment app password and use the strongest login protection offered, such as in app approval or a passkey.
  2. Review saved payees and direct debits, and remove anything you do not recognise.
  3. Agree that any change to a regular payee's bank details must be confirmed by phone on a number you already hold.
  4. Turn on alerts for every outgoing payment.
  5. If the leak came from a budgeting or accounting app, revoke its bank connection and reconnect only if you still trust it.

Frequently asked questions

Can someone take money using my transaction history?

Not directly. The history is used to make scams believable and to redirect payments you already make.

How did a budgeting app get my transactions?

Through a connection you authorised to your bank, often through open banking. You can revoke that connection in the app and in your bank's settings.

Should I change banks?

Not usually. Securing the login, reviewing payees and being strict about payment detail changes deals with the realistic risks.

Breaches that exposed this data

  • Paidwork: 2026-03-29, 23M accounts, Bank account numbers, Dates of birth, Device information, Education levels, Email addresses, Financial transactions
  • Ameriprise: 2026-03-02, 503K accounts, Email addresses, Employers, Financial transactions, Job titles, Names, Phone numbers
  • BtoBet: 2019-12-26, 444K accounts, Dates of birth, Email addresses, Financial transactions, Geographic locations, IP addresses, Names
  • Qatar National Bank: 2015-07-01, 89K accounts, Bank account numbers, Customer feedback, Dates of birth, Financial transactions, Genders, Geographic locations

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.