PayPal Working Capital Loan App Data Exposure

Timeline

1. 20.02.2026 15:12 1 articles · 9h ago

   PayPal Working Capital Loan App Data Exposure Disclosed

   On December 12, 2025, PayPal discovered a software error in its PayPal Working Capital loan application that exposed sensitive personal information of users, including Social Security numbers, for nearly six months. The breach was contained on December 13, 2025, and affected users are offered credit monitoring and identity restoration services.

   Show sources

   • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

   Open in new tab

Information Snippets

• The breach affected the PayPal Working Capital (PPWC) loan app, which provides small businesses with quick access to financing.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

• Exposed data included names, email addresses, phone numbers, business addresses, Social Security numbers, and dates of birth.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

• The incident occurred between July 1, 2025, and December 13, 2025.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

• PayPal reversed the code change on December 13, 2025, blocking further unauthorized access.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

• Unauthorized transactions were detected on a small number of accounts, and refunds were issued.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

• Affected users are offered two years of free credit monitoring and identity restoration services through Equifax.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12

• PayPal reset passwords for all impacted accounts and prompted users to create new credentials.

  First reported: 20.02.2026 15:12
  1 source, 1 article
  Show sources

  • PayPal discloses data breach that exposed user info for 6 months — www.bleepingcomputer.com — 20.02.2026 15:12