PayPal SSN Exposure Lasting Six Months — February 2026
A code change at PayPal allowed unauthorized access to Social Security Numbers and account details for approximately six months before discovery in February 2026.
- Social Security Numbers
- Account metadata
- Linked-account details
A misconfigured code change at PayPal allowed unauthorized access to Social Security Numbers and linked-account details for approximately six months before discovery in February 2026. The exposure window means the dataset has likely already circulated through underground channels.
SSN exposure is the worst kind for identity-theft cascades. Combined with the email and account metadata in this incident, attackers have everything they need to open credit, file fraudulent tax returns, or impersonate the victim across financial services. Enable a credit freeze immediately if you have a PayPal account that may have been affected.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →