PayPal Details
PayPal
San Jose, California • employees • Financial Services
Industry
Financial Services
Security Incidents
1
PayPal Holdings, Inc. is an American multinational financial technology company operating an online payments system in the majority of countries that support online money transfers; it serves as an electronic alternative to traditional paper methods such as checks and money orders.
Security Incidents
PayPal Breach of Dec 2022
Show more
Severity Score
Moderate
Type
Credential StuffingSummary
In December 2022, PayPal experienced a security breach that resulted from a credential stuffing attack, where threat actors used previously compromised credentials from other data breaches to gain unauthorized access to PayPal accounts. The breach was discovered in early January 2023, and PayPal promptly notified affected users. Approximately 35,000 accounts were compromised, exposing sensitive information such as names, addresses, Social Security numbers, and individual transaction histories. PayPal took immediate steps to secure the affected accounts, including resetting passwords and enhanc...Show more
Severity
The breach was severe as nearly 35,000 PayPal accounts were accessed through a credential stuffing attack, exposing sensitive personal information such as names, addresses, social security numbers, tax identification numbers, and dates of birth.Impact
The breach impacted 35,000 individuals whose accounts were targeted, leading to unauthorized access to their PayPal customer accounts using compromised login credentials.KEEP YOUR ENVIRONMENT SECURE
Weak credentials are the leading cause of breaches. Beyond Identity can help.
See MFA exploits in action
Watch how adversaries exploit companies in quick videos