While PayPal denies claims of a data breach, 15.8 million PayPal credentials were posted to a data leak forum the week of August 18th. The stolen information included emails and passwords in plain text. Poster of the information claim that it was stolen in May of 2025, but according to a statement in Tom’s Guide PayPal says there was a security incident all the way back in 2022.
Protect Yourself Now
- If you use PayPal, you should reset your password.
- Do not reuse passwords across platforms.
- Use multifactor authentication where possible.
It can be difficult to remember long, complex passwords, especially when we’re told not to reuse them across platforms. Using a password manager like KeePass or Bitwarden can help you maintain security best practices while only having to remember one long, complex password.
Tom’s Guide also suggests registering for an identity theft monitoring service. While it seems like nothing is private anymore, if you’re truly concerned that your credit or bank account information is at risk, this may be a viable and worth while option for you.
For more details on the potential PayPal data breach, visit the Tom’s Guide article. And again, if you use PayPal, please go change your password now.
