PayPal—PayPal disclosed data breach exposing Social Security numbers of ~100 users for 5-6 months
On February 10, 2026, PayPal disclosed a data breach affecting approximately 100 PayPal Working Capital loan applicants due to a software coding error. Personal data including Social Security numbers, dates of birth, and business contact information was exposed from July 1 to December 13, 2025. Some customers experienced unauthorized transactions and received refunds. PayPal offered 2 years of free credit monitoring through Equifax.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Data Security | -against | primary | -1.00 |
| User Privacy | -against | secondary | -0.50 |
| Overall incident score = | -0.443 | ||
Score = avg(topic contributions) × significance (medium ×1) × confidence (0.59)
Evidence (1 signal)
PayPal disclosed 5-6 month data breach affecting Working Capital loan applicants
PayPal notified customers on February 10, 2026 of a data breach caused by a software coding error that exposed personal data from July 1 to December 13, 2025. Exposed data included Social Security numbers, dates of birth, and business contact information for approximately 100 PayPal Working Capital users. Some customers experienced unauthorized transactions. PayPal offered 2 years of free Equifax credit monitoring.