PayPal has confirmed that a data exposure incident affected a small group of its users which led to unauthorised activity and mandatory password resets.
PayPal says a 2025 code change allowed unauthorized access for nearly six months, exposing Social Security numbers and other data tied to its Working Capital app.