PayPal Details

    Organization Logo

    PayPal

    San Jose, California employees • Financial Services

    Industry

    Financial Services

    Security Incidents

    1

    PayPal Holdings, Inc. is an American multinational financial technology company operating an online payments system in the majority of countries that support online money transfers; it serves as an electronic alternative to traditional paper methods such as checks and money orders.

    Security Incidents

    PayPal Breach of Dec 2022
    Severity Score
    Moderate

    Type

    Credential Stuffing

    Summary

    In December 2022, PayPal experienced a security breach that resulted from a credential stuffing attack, where threat actors used previously compromised credentials from other data breaches to gain unauthorized access to PayPal accounts. The breach was discovered in early January 2023, and PayPal promptly notified affected users. Approximately 35,000 accounts were compromised, exposing sensitive information such as names, addresses, Social Security numbers, and individual transaction histories. PayPal took immediate steps to secure the affected accounts, including resetting passwords and enhanc...
    Show more

    Severity

    The breach was severe as nearly 35,000 PayPal accounts were accessed through a credential stuffing attack, exposing sensitive personal information such as names, addresses, social security numbers, tax identification numbers, and dates of birth.

    Impact

    The breach impacted 35,000 individuals whose accounts were targeted, leading to unauthorized access to their PayPal customer accounts using compromised login credentials.