Breaches and incidentsBriefReported by a reputable outlet, citing the company
PayPal: coding error in the Working Capital loan app exposed SSNs for about six months
PayPal told customers that an error in its PayPal Working Capital (PPWC) application exposed business contact details, Social Security numbers and dates of...
- Disclosed
What happened
- PayPal told customers that an error in its PayPal Working Capital (PPWC) application exposed business contact details, Social Security numbers and dates of birth of “a small number of customers” between 1 Jul and 13 Dec 2025; some saw unauthorized transactions, which PayPal refunded. One report puts the count at about 100 customers (company figure via secondary outlets).
- Root cause: an application software error (code change), not an intrusion; PayPal detected it on 12 Dec 2025 and rolled back the code.
- No attacker named.
- Notices sent to affected customers; reported as filed with the Massachusetts Attorney General.
Sources
- https://securityaffairs.com/188309/data-breach/paypal-discloses-extended-data-leak-linked-to-loan-app-glitch.html
- https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.