logo

PayPal to pay NYS $2M for violating DFS’s Cybersecurity Regulation

ID: 6c3fcd86-fa5c-5367-b134-3ae582521110

STIX ID: report--6c3fcd86-fa5c-5367-b134-3ae582521110

Feed Name: DataBreaches.Net

Threat Score
50/100

Date Published: 2025-01-23

Date Updated: 2026-04-19

Author: Dissent

...
...

**NYDFS fined PayPal $2M for cybersecurity failures that led to unauthorized access to 1099-K forms containing SSNs, stemming from untrained implementation of data flow changes and inadequate access controls (no MFA/CAPTCHA/rate limiting); cybercriminals leveraged compromised credentials, and PayPal has since remediated the issues.**

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.