Abraham Jewett  |  January 24, 2023

Category: Consumer News

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Hands on phone logging into PayPal - PayPal data breach
(Photo Credit: mrmohock/Shutterstock)

PayPal data breach overview: 

  • Who: PayPal revealed that it suffered a data breach as a result of a credential stuffing attack that exposed the personal information of nearly 35,000 of its users. 
  • Why: PayPal says the data breach was the result of a credential stuffing attack but that it found no evidence the threat actor obtained the stolen credentials from it directly.
  • Where: PayPal is used by consumers nationwide.

PayPal has notified its users of a data breach the e-commerce company says it suffered as a result of a credential stuffing attack that it says exposed some personal data of nearly 35,000 users. 

The data breach reportedly occurred between Dec. 6 and 8, 2022, according to PayPal, which said it was able to both detect and mitigate the breach at that time. 

PayPal said that it also conducted an internal investigation — which concluded Dec. 20 — into determining how the bad actors were able to gain access to the compromised accounts. 

The company ultimately found the unauthorized third parties were able to log into the affected PayPal accounts using valid credentials. 

PayPal said it found no evidence the stolen user credentials were acquired from them directly and that the data breach was not due to any sort of breach on the company’s systems. 

The data breach granted hackers access to impacted PayPal account holders full names, birthdates, Social Security numbers, postal addresses and individual tax identification numbers. 

PayPal says it mitigated data breach by limiting access and resetting passwords of compromised accounts

Other information that may have been compromised during the PayPal data breach includes transaction histories and connected credit or debit card details, along with company invoicing data. 

PayPal said it mitigated the data breach by limiting the bad actors’ access to the platform and by resetting the passwords for accounts that it confirmed had been compromised. 

The company also reassured users it found no evidence the bad actors either attempted to or managed to perform an unauthorized transaction from an affected PayPal account. 

“We have no information suggesting that any of your personal information was misused as a result of this incident, or that there are any unauthorized transactions on your account,” PayPal said. 

A class action lawsuit was filed against PayPal last year by a consumer arguing the company fails to reimburse its customers who suffer losses as a result of fraud on its Venmo mobile payment service. 

Have you been impacted by a data breach? Let us know in the comments.


Don’t Miss Out!

Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!


Read About More Class Action Lawsuits & Class Action Settlements:

We tell you about cash you can claim EVERY WEEK! Sign up for our free newsletter.

1,204 thoughts onPayPal data breach affects thousands of users

  1. Susan Mahoney says:

    Add me I had a huge problem with my acct. In fact they locked me out of my acct. Then somehow I had a new acct. and went through an ordeal trying to access and find my actual acct. Never found out what happened to the other acct. Or why there was two or what happened to money in acct.

    1. Eva Honeycutt says:

      I had put PayPal on my Amazon account and every transaction was declined by PayPal and they said it was my bank I contacted my bank and it was not my bank. I asked PayPal to detach from my Amazon account and for months every purchase that I made to Amazon was declined and I have always been a good customer with a good reputation with Amazon and I kept explaining to PayPal that they was ruining my reputation with a company that I’ve been shopping with for years it took me months to have them remove it finally I had to go to my bank and have them remove it and it took them about 3 weeks so please add me to this lawsuit I have stuff going through PayPal right now but I will never touch them on anything else. On the phone for hours and kept getting the runaround

  2. Ann Jory says:

    I have had 2 accounts with PayPal for over 15 years ..They withheld my money from me .it was friend to friend money deal.i never received it . please add to this lawsuit.

  3. karen nins says:

    Please add me, I have used Paypal for about 10 years now and I now also have credit through them. I am in the middle of a horrible Fraud Identity theft and not sure what has happened. I have had to file with the police, Government Fraud, have had to cancel all my credit cards and order new ones. Someone is charging all kind of things, even their Apple, and electric bill. They have spent over 500.00 om Raffle tickets on my charge cards. I try to buy something and no one want to take my cards. It is a horrible mess and i am going absolutely crazy. Thank you, Karen Nims

  4. Ryan schmidt says:

    Yes PayPal held and kept over 500$ of my money and says I owe more I hadn’t used um since they took 500$ I had deposited in my act

  5. Louie G says:

    Please add me

  6. D says:

    I’ve had 2 different PayPal accounts for more than 10 years…Please add me….

  7. PEGGY MERCHANT says:

    Add me been using PayPal for over 15 yrs

    1. Christine Vaughn says:

      Please add me

  8. Judy Andryshak says:

    Please add me I have been a victim of a phishing scam bcuz of PayPal

  9. Kathleen Basiewicz says:

    Please add me. I have been using PayPal for many years because I thought that I and my information would be safe from prying eyes. However, I guess I was wrong.

  10. Marie Y Bennett says:

    please add me

Leave a Reply

Your email address will not be published. By submitting your comment and contact information, you agree to receive marketing emails from Top Class Actions regarding this and/or similar lawsuits or settlements, and/or to be contacted by an attorney or law firm to discuss the details of your potential case at no charge to you if you qualify. Required fields are marked *

Please note: Top Class Actions is not a settlement administrator or law firm. Top Class Actions is a legal news source that reports on class action lawsuits, class action settlements, drug injury lawsuits and product liability lawsuits. Top Class Actions does not process claims and we cannot advise you on the status of any class action settlement claim. You must contact the settlement administrator or your attorney for any updates regarding your claim status, claim form or questions about when payments are expected to be mailed out.