PayPal Discloses Data Breach That Exposed User Info For 6 Months (bleepingcomputer.com)
(Friday February 20, 2026 @05:40PM (msmash)
from the privacy-woes dept.)
- Reference: 0180832186
- News link: https://slashdot.org/story/26/02/20/1733211/paypal-discloses-data-breach-that-exposed-user-info-for-6-months
- Source link: https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/
PayPal is [1]notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year. From a report:
> The incident affected the PayPal Working Capital (PPWC) loan app, which provides small businesses with quick access to financing. PayPal discovered the breach on December 12, 2025, and determined that customers' names, email addresses, phone numbers, business addresses, Social Security numbers, and dates of birth had been exposed since July 1, 2025.
>
> The financial technology company said it has reversed the code change that caused the incident, blocking attackers' access to the data one day after discovering the breach. "On December 12, 2025, PayPal identified that due to an error in its PayPal Working Capital ('PPWC') loan application, the PII of a small number of customers was exposed to unauthorized individuals during the timeframe of July 1, 2025 to December 13, 2025," PayPal said in breach notification letters sent to affected users. "PayPal has since rolled back the code change responsible for this error, which potentially exposed the PII. We have not delayed this notification as a result of any law enforcement investigation."
[1] https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/
> The incident affected the PayPal Working Capital (PPWC) loan app, which provides small businesses with quick access to financing. PayPal discovered the breach on December 12, 2025, and determined that customers' names, email addresses, phone numbers, business addresses, Social Security numbers, and dates of birth had been exposed since July 1, 2025.
>
> The financial technology company said it has reversed the code change that caused the incident, blocking attackers' access to the data one day after discovering the breach. "On December 12, 2025, PayPal identified that due to an error in its PayPal Working Capital ('PPWC') loan application, the PII of a small number of customers was exposed to unauthorized individuals during the timeframe of July 1, 2025 to December 13, 2025," PayPal said in breach notification letters sent to affected users. "PayPal has since rolled back the code change responsible for this error, which potentially exposed the PII. We have not delayed this notification as a result of any law enforcement investigation."
[1] https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/
If you havnt already (Score:2)
by Slashythenkilly ( 7027842 )
Freeze your credit at the three agencies, lock any Paypal ties to your bank accounts, and comb over any Paypal transactions while updating passwords, account info, etc.
So they knew Dec 12th 2025 (Score:3)
And they finally got around to warning their customers now!
Wow! what timely action, but then it is only their customers that face risk.
Re: (Score:2)
Is that scam still around?