What's Happened
- a scammer has advertised 15.8 Million PayPal user details for sale on the Dark Web
- these Email Addresses and Passwords were claimed to have been obtained in May '25
- additionally, the scammer claims the leaked data contains the web site addresses of other sites where these details were used
- this means whoever buys this data can easily automate the 'data stuffing' of the details into multiple, already identified web sites
- PayPal has countered by claiming some of these come from a 2022 data breach in 2022 that affected 35,000 people
What Do You Need To Do ?
- reset your PayPal details as soon as possible
- turn-on 2-Factor Authentication (2-FA)
HTS are happy to answer any Questions or to help you change your password and turn-on 2-FA for increased security.