PayPal Data Breach Exposed Customer Information for 6 Months Due to Software Error
By
el_duderino
Slow-proofed and worth the wait. Worth its weight in flour.
Summary
PayPal disclosed a data breach affecting its PayPal Working Capital loan application, where a software error exposed customers' sensitive personal information including Social Security numbers, names, email addresses, phone numbers, business addresses, and dates of birth. The breach lasted from July 1, 2025, to December 12, 2025, when it was discovered, affecting small business customers who used the financing service.
Key quotes
· 3 pulledPayPal is notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year.
The incident affected the PayPal Working Capital (PPWC) loan app, which provides small businesses with quick access to financing.
PayPal discovered the breach on December 12, 2025, and determined that customers' names, email addresses, phone numbers, business addresses, Social Security numbers, and dates of birth had been exposed since July 1, 2025.
You might also wanna read
Carnival Corporation data breach exposes personal information after social engineering attack
Carnival Corporation experienced a data breach in April 2026 where a hacker used social engineering tactics to trick an employee into granti
bit.ly·2d ago
Cybersecurity Roundup: Cyber Command Modernization, Data Breaches, and Malware Campaigns
This article covers multiple cybersecurity incidents and developments: Cyber Command's new chief pushing modernization amid concerns about c
thecyberwire.com·2d ago
StablR halts USDR and EURR operations after $13.5 million minting exploit via multisig wallet weakness
European stablecoin issuer StablR has suspended minting and redemption for its USDR and EURR tokens after a cyberattack exploited a 1-of-3 m
coindesk.com·4d ago
Personal Health Records Are the Most Valuable Stolen Data at $300 Per Record, Study Finds
Security researchers analyzed 348 real data breach listings from dark and clear web marketplaces (2008-2026) to determine the most valuable
flare.io·4d ago
AI Didn't Invent New Cyberattacks — It Just Made Old Ones Cheap and Accessible
The article argues that AI hasn't created fundamentally new types of cyberattacks, but has dramatically lowered the cost and skill barriers
konstantintkachuk.com·13d ago
Cyvers launches pre-transaction threat prevention platform for institutional financial crime detection
Cyvers is launching a pre-transaction threat prevention layer on Product Hunt, designed to replace fragmented financial crime tools for inst
Product Hunt·26d ago