A social engineering campaign impersonating PayPal and Amazon uses customer support interactions to acquire sensitive info.
Tag: PayPal
Global Security News
PayPal Confirms Six-Month Data Exposure Linked to Loan System Error
PayPal has confirmed a data leak in its Working Capital loan system that exposed names, dates of birth, and Social Security numbers for six months.
AI, Apps, Data Breaches, Global Security News
PayPal discloses extended data leak linked to Loan App glitch
PayPal disclosed a six-month data breach that exposed sensitive user data, including Social Security numbers, due to a software error. PayPal has disclosed a data breach caused by a software bug in its PayPal Working Capital loan app. The flaw exposed sensitive customer information, including customers’ business contact details (name, email, phone number, address), along…
AI, Apps, Data Breaches, Global Security News, Network Security, Risk Management
PayPal Flaw Exposed Sensitive Data in Lending App for Six Months
PayPal is notifying customers after a software error in its PayPal Working Capital (PPWC) loan application exposed certain personal information, including social security numbers, for nearly six months in 2025. Although the company said its core systems were not breached, the issue resulted in potential unauthorized access to sensitive customer data. “Upon learning about this…
Apps, Data Breaches, Global Security News
PayPal discloses data breach that exposed user info for 6 months
PayPal is notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year. […]
AI, Compliance, Cybersecurity, Global Security News, Government & Policy, privacy, Risk Management
PayPal launches latest struggle to get rid of SMS for MFA
When PayPal started emailing customers this month that it was backing off unencrypted SMS for multifactor authentication (MFA) at login, it came with the typical approach-avoidance asterisk. The financial services giant signaled that it was turning the page on the much-maligned authentication method while simultaneously offering no timeline and assuring customers SMS wouldn’t entirely go…