🔓 PayPal discovered a data breach on December 12, 2025, affecting approximately 100 customers through its PayPal Working Capital loan application. The breach exposed sensitive personal information including names, Social Security numbers, dates of birth, email addresses, phone numbers, and business addresses between July 1 and December 13, 2025.

🛡️ A coding error in the loan app's software allowed unauthorized individuals to access customer data for nearly six months before the company detected and fixed the vulnerability. PayPal immediately rolled back the problematic code change, reset affected customer passwords, and implemented enhanced security controls to prevent future incidents.

💳 A small number of affected customers experienced unauthorized transactions on their accounts as a direct result of the breach. PayPal has issued full refunds to all customers who suffered fraudulent charges and is providing two years of complimentary credit monitoring and identity restoration services through Equifax.

⚠️ Affected customers are advised to monitor their credit reports and account activity for suspicious transactions. PayPal emphasized that it never requests passwords or authentication codes via phone, text, or email, and urged users to remain vigilant against phishing attempts that often follow data breach announcements.

📋 PayPal stated that the breach did not result from a compromise of its core systems and that the notification was not delayed due to law enforcement investigations. The company confirmed it took immediate action upon discovery to contain the unauthorized access.

#PayPalDataBreach #CyberSecurityAlert #IdentityTheftProtection