Yes—but only in a limited, documented sense. A PayPal breach notification says an error in a PayPal Working Capital loan application exposed some customers’ personal information between July 1 and December 13, 2025. PayPal said it identified the error on December 12, 2025, and that a few affected customers experienced unauthorized transactions and were refunded.
The notice does not disclose how many customers, transactions, or dollars were involved. It also does not establish that every suspicious PayPal payment resulted from this incident.
Which PayPal incident does this refer to?
The available notification concerns a coding or application error connected with PayPal Working Capital, not a claim that PayPal’s entire customer database was hacked. The notice, dated February 10, 2026, says personal information may have been exposed from July 1 through December 13, 2025. PayPal says it discovered the issue on December 12, 2025.
The notice is published on ClassAction.org’s document repository and carries PayPal letterhead. It says the affected information could have included the following, depending on the recipient:
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Name
- Email address
- Telephone number
- Business address
- Social Security number
- Date of birth
“Could have included” is important: the notice does not say every person received exposure of every listed data element. It also does not say payment-card numbers were exposed.
Read the PayPal breach notification.
Did the breach cause fraudulent transactions?
PayPal’s notice supports a narrow connection. It states that a few customers affected by the incident experienced unauthorized transactions and that PayPal refunded those customers.
That statement is not a transaction total, and it is not proof that every unfamiliar PayPal charge was caused by the Working Capital application error. A suspicious payment can instead involve a stolen password, a compromised email account, a voluntary payment induced by a scammer, a merchant dispute, or an unrelated card or bank-account compromise.
Timeline of the reported incident
| Date | What the notice says |
|---|---|
| July 1, 2025 | Start of the period in which information may have been exposed. |
| December 12, 2025 | PayPal says it identified the error and unauthorized activity. |
| December 13, 2025 | End of the stated exposure period. |
| February 10, 2026 | Date on the individual breach notification. |
| June 30, 2026 | Enrollment deadline stated for the complimentary Equifax service. |
What PayPal says it did
According to the notification, PayPal investigated, terminated unauthorized access, reset passwords for affected accounts, rolled back the responsible code change, and added controls requiring affected users to create a new password at their next login. It also says PayPal refunded the few customers who experienced unauthorized transactions.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Eligible recipients were offered two years of Equifax credit monitoring and identity-restoration services. The stated enrollment deadline was June 30, 2026, so readers should not assume that offer remains open. Verify any late or replacement notice through PayPal’s official Security Center.
What to do if money is missing
- Open PayPal independently. Type PayPal’s address yourself or use the official app. Do not use a link or phone number from an unexpected message.
- Document the payment. Save the date, amount, merchant descriptor, screenshots, emails, and any changed account details.
- Report it in the Resolution Center. PayPal directs personal and business users to its Report Fraud and Resolution Center page for transactions they did not make or authorize.
- Contact the funding institution. Notify the bank, debit-card issuer, credit-card issuer, or PayPal Credit provider that funded the payment. Its dispute process may be separate from PayPal’s.
- Change credentials. Set a unique PayPal password and change any other account that reused it. Secure the email account connected to PayPal as well.
- Turn on multifactor authentication. Review recovery email addresses, phone numbers, shipping addresses, linked cards, and bank accounts for changes you did not make.
- Preserve the case number. Do not close the PayPal account until you have downloaded records and recorded the dispute reference.
PayPal’s breach notice says it will not ask for your username, password, or an authentication factor such as a one-time code by phone, text, or email.
What to do if no transaction is visible
- Change reused passwords and enable multifactor authentication.
- Review PayPal activity and every linked financial account.
- Obtain your credit reports through AnnualCreditReport.com.
- Consider a fraud alert or credit freeze if a Social Security number or date of birth may have been exposed.
- Watch for targeted phishing, fake “breach compensation” offers, and requests for fees, gift cards, cryptocurrency, passwords, codes, or identity documents.
PayPal advises customers to contact their financial institutions and report identity theft to the Federal Trade Commission when appropriate.
Will PayPal reimburse an unauthorized transaction?
PayPal’s U.S. User Agreement defines an unauthorized transaction as money sent from an account without the account holder’s authorization and without benefiting that person. PayPal investigates each report and decides whether its protection applies.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
The agreement requires prompt reporting. It says that failing to notify PayPal within 60 days after a statement was provided may affect recovery of later losses if PayPal can show that timely notice would have prevented them. A customer who voluntarily gave another person access may not qualify, and a dispute over an item, service, delivery, or amount is not automatically an unauthorized-account transaction.
Rules can differ for PayPal payments, PayPal Credit, debit cards, linked bank accounts, and business accounts. A refund mentioned in the breach notice is not a guarantee that every later suspicious transaction will be reimbursed. Review the PayPal U.S. User Agreement and report promptly.
Fraud alert or credit freeze?
| Option | What it does | Main trade-off |
|---|---|---|
| Fraud alert | Asks lenders to take extra steps to verify your identity. An initial alert placed with one bureau is generally shared with the other two. | Less disruptive than a freeze, but it does not block applications by itself. |
| Credit freeze | Restricts access to your credit report for new-credit applications. | Free under federal law, but you must temporarily lift it when applying for legitimate credit. |
| Credit monitoring | Alerts you to certain changes or activity. | It does not prevent every kind of fraud or recover stolen transaction funds. |
Official freeze and alert information is available from Equifax, Experian, and TransUnion.
Keep these four situations separate
Unauthorized PayPal payment
Money left your PayPal account without your permission. Report it to PayPal and the funding institution.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Unauthorized card charge
A PayPal-branded card or linked card shows a charge. The card issuer may require a separate dispute.
Merchant dispute
You authorized the payment but contest the item, service, delivery, or amount. That is not automatically an unauthorized-transaction claim.
Phishing or impersonation
A scammer is trying to obtain credentials or codes. The presence of a fake PayPal message does not by itself prove that PayPal was breached.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What remains unknown
- The total number of affected customers.
- The number and dollar value of unauthorized transactions.
- Whether every reported transaction was directly attributable to this incident.
- Whether additional recipients or remedies exist after the June 30, 2026 monitoring deadline.
Those limits are why “PayPal breach caused a wave of fraud” is broader than the available evidence supports.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How to avoid follow-up scams
Navigate to PayPal yourself and use its Security Center or Help & Contact channels. Treat unsolicited messages promising compensation, demanding a fee to activate monitoring, or requesting passwords, one-time codes, Social Security numbers, or identity documents as suspicious. A familiar merchant name on a statement is not proof that you authorized the payment.
Frequently Asked Questions
Was PayPal hacked?
The available notification describes an error in a PayPal Working Capital loan application that may have exposed some customers’ information. It does not establish that all PayPal users were affected or describe a conventional database theft.
How do I report an unauthorized PayPal payment?
Use PayPal’s official Resolution Center and Report Fraud page at https://securepayments.paypal.com/us/security/report-fraud, then notify the bank or card issuer that funded the payment.
Can I still enroll in the Equifax offer?
The breach notice states a June 30, 2026 enrollment deadline. Verify any late notice directly through PayPal’s Security Center rather than assuming enrollment remains available.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteShould I freeze my credit?
If your Social Security number or date of birth may have been exposed, a free credit freeze can restrict new-credit applications. A fraud alert is less disruptive but does not block applications by itself.
The Bottom Line
PayPal linked unauthorized transactions to a few customers covered by a Working Capital application error and says those customers were refunded. If you see an unfamiliar payment, report it immediately through PayPal and your funding institution; do not assume the breach notice guarantees reimbursement for every case.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
