logo

PayPal app code error leaked personal info and a 'few' unauthorized transactions

ID: f08293d1-3daf-59f7-9077-e154a9235b32

STIX ID: report--f08293d1-3daf-59f7-9077-e154a9235b32

Feed Name: The Register (Security)

Threat Score
35/100

Date Published: 2026-02-20

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

PayPal notified about 100 customers that a coding error in its PayPal Working Capital loan application exposed sensitive personal and business PII (including SSNs and DOBs) between July and December 2025; a few accounts saw unauthorized transactions that were refunded, and PayPal rolled back the change, reset passwords, and offered two years of credit monitoring while saying its systems were not compromised.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.