Get the latest tech news
Hackers claim millions of PayPal accounts leaked while experts say the data looks suspiciously cheap and possibly stolen from old infostealer logs
PayPal insists no new breach occurred, claims older credential stuffing
Hackers recently announced on a well-known forum that they were selling a dataset of 15.8 million stolen PayPal credentials, allegedly including login emails and plaintext passwords. The cybercriminals claim the information was stolen in May 2025, and the dataset contains not just emails and passwords but also associated URLs, making it easier for criminals to automate credential stuffing attacks and launch identity theft scams. You may like However, experts who examined the small sample released to the public concluded it was insufficient to verify the attackers’ claims, noting if the breach really occurred in May 2025, much of the usable data might already have been exploited.
Or read this on r/technology