X-twitter Facebook-f Pinterest-p
X-twitter Facebook-f Pinterest-p

PayPal discloses extended data leak linked to Loan App glitch


PayPal discloses extended data leak linked to Loan App glitch

Pierluigi Paganini
February 20, 2026

PayPal disclosed a six-month data breach that exposed sensitive user data, including Social Security numbers, due to a software error.

PayPal has disclosed a data breach caused by a software bug in its PayPal Working Capital loan app. The flaw exposed sensitive customer information, including customers’ business contact details (name, email, phone number, address), along with Social Security numbers and dates of birth, since July 1, 2025, before it was discovered and fixed.

On December 12, 2025, PayPal discovered that a coding error in its PayPal Working Capital loan application had exposed the personal information of a small number of customers to unauthorized parties between July 1 and December 13, 2025. The company has since addressed the issue and said the notification was not delayed due to any law enforcement investigation.

“On December 12, 2025, PayPal identified that due to an error in its PayPal Working Capital (“PPWC”) loanapplication, the PII of a small number of customers was exposed to unauthorized individuals during thetimeframe of July 1, 2025 to December 13, 2025. PayPal has since rolled back the code change responsiblefor this error, which potentially exposed the PII.” reads the data breach notification. “We have not delayed this notification as a result of any law enforcement investigation”

After detecting the unauthorized access, the company launched an investigation, blocked the intrusion, and reset affected passwords. PayPal also announced the implementation of stronger security checks. The company confirmed that a small number of customers observed unauthorized transactions, which have already been refunded.

The company also offers impacted users two years of complimentary credit monitoring and identity restoration services through Equifax.

Affected users should closely monitor their accounts, transaction history, and free credit reports for suspicious activity and report any fraud immediately. Customers are also encouraged to enroll in complimentary three-bureau credit monitoring through Equifax by June 30, 2026. The company advises reviewing guidance on fraud alerts, free credit reports, and FTC resources to better protect personal information.

In January 2023, PayPal announced that 34942 customers’ accounts had been compromised between December 6 and December 8, 2022. The company added that the unauthorized access was the result of credential stuffing attacks and that its systems were not breached.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, data breach)





Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

5 reasons to reconsider using it

Russia-linked actors target WhatsApp and Signal in phishing campaign

Oracle fixes critical RCE flaw CVE-2026-21992 in Identity Manager

U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog

Fact-checking Google’s AI Overviews just got a little easier – here’s how

Russia-linked actors target WhatsApp and Signal in phishing campaign

Oracle fixes critical RCE flaw CVE-2026-21992 in Identity Manager

U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog

Tesla’s new Roadster could finally debut next month, but there’s an emphasis on “hopefully”

Russia-linked actors target WhatsApp and Signal in phishing campaign

Oracle fixes critical RCE flaw CVE-2026-21992 in Identity Manager

U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog

Recent Reviews

Fact-checking Google’s AI Overviews just got a little easier – here’s how


Google's AI Overviews show the original sources in pop-up windows

Screenshot by Lance Whitney/ZDNET

Follow ZDNET: Add us as a preferred source on Google.

ZDNET’s key takeaways

  • Google’s AI now shows you the original sources via pop-up windows.
  • The new option works in both AI Overviews and AI Mode.
  • Just click the link in the pop-up to view the source’s website.

I often turn to Google’s AI Overviews and AI Mode when I run a search on a particular topic. The resulting Gemini-based summaries can cut to the chase by providing the gist of the information I seek. But there’s one big downside. AI can be wrong. For that reason, I never rely solely on AI; I always double-check the original sources used to create the summary. And now Google has made that process easier.

Also: How to get rid of AI Overviews in Google Search: 4 easy ways

\In a recent post on X, Robby Stein, product VP for Google Search, announced a new feature designed to benefit all Google users. With both AI Overviews and AI Mode, groups of links now automatically appear in a pop-up window as you hover over them. This means you can jump to the website for any specific source more quickly to double-check the information in the AI summary.

Here’s how this plays out.

Just click the links to verify AI’s information

Head to Google’s search engine via your favorite desktop browser. Enter a search word or phrase in the search field. In response, Google will likely show you an AI Overview at or near the top of the regular results.

Within the overview, you should see links at the end of each paragraph or section. Hover over one of those links, and a small window pops up with a description and link for the source used to compile the overview. Click the link, and you’re taken to the source’s website where you can verify the information and get the full story.

Also: I tested Google Docs’ new AI audio summaries, and they’re a massive time-saver

This also works in AI Mode. Select the heading at the top for AI Mode. Hover over a link contained in the AI summary to see the sources consulted for that particular paragraph or section. From the pop-up window, click the link for a source to visit its website.

“Our testing shows this new UI is more engaging, making it easier to get to great content across the web,” Stein said in his post.

Google had already been displaying a list of sources used by Gemini on the right side of the screen. But now the new pop-up windows make it easier to see which source contributed to which content. Rather than rely on AI Overview or AI Mode summaries alone, you’ll want to check out the original sources, and this new option makes it easier than ever.





Source link

PayPal discloses extended data leak linked to Loan App glitch

U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog

Security Affairs newsletter Round 564 by Pierluigi Paganini – INTERNATIONAL EDITION

Copyright © 2024 All Rights Reserved.