PayPal experienced a data breach due to a coding error in its Working Capital loan application, exposing customers' personal information, including Social Security numbers and business details, for about six months. The breach was identified on December 12, 2025, and reported to affected customers on February 10, 2026. No external intrusion was involved; it was an internal issue. PayPal has since rolled back the problematic code, terminated unauthorized access, initiated a full investigation, and is offering affected users two years of free credit monitoring.
https://cybersecuritynews.com/paypal-data-breach-expose-customer-data/