PayPal hacker attack exposes customer names and social security numbers in credential stuffing attack (ie script-kiddy brute force hack right out of the 1990's)

submitted by SoCo from foxnews.com

all 8 comments
sorted by:
top
newinsightfulfun

[–]SoCo[S] 4 insightful - 2 fun4 insightful - 1 fun5 insightful - 2 fun -  (0 children)

In similar news:

Announcement: GitHub Sponsors Will Stop Supporting PayPal

[–]dicknipples 4 insightful - 1 fun4 insightful - 0 fun5 insightful - 1 fun -  (2 children)

Link to a trustworthy source, ffs:

https://www.forbes.com/sites/daveywinder/2023/01/21/no-paypal-hasnt-been-hacked-yet-almost-35000-accounts-were-breached/?sh=6b3d53fa3ea7

The answer is an emphatic no; hackers did not breach PayPal. The irony here is that it will have been breaches at other services that were behind the large-scale credential stuffing attack, which led to nearly 35,000 PayPal customer accounts being accessed by an unauthorized third-party criminal actor.

Jake Moore, the global cyber security advisor at ESET, has further advice for concerned PayPal customers among the 34,942 account holders impacted here. "The owners of the affected accounts should by now have been notified, and it would be advisable for those people to remain on high alert due to the amount of personal data that may have been accessed in this unfortunately simple breach. Credential stuffing is an automated process where a threat actor uses reused log-on credentials stolen from subsequent password breaches on another account.

[–]dissidentrhetoric 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (1 child)

forbes trustworthy? haha

[–]dissidentrhetoric 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

I closed my paypal account years ago.

[–]Brewdabier 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

Pay pal, LMFAO. I racked up over $4000 in loans and never payed a cent back. This was 2008 financial crisis as you might remember what happen then, $1200 was just for computer upgrades and a ham radio for like $2000.

[–]scryforhelp 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

"The company is also offering victims two years of free identity monitoring from Equifax."

LOL

[–]WoodyWoodPecker 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

They banned my account from buying gun parts. It was a scope for a pellet gun rifle and not a real gun, but they limited my account so I cannot send or receive money.

[–]Kephart 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

I got hit with ID theft almost immediately after I shut down my paypal account in response to their new "misinformation" fines. Honestly I half suspected this was some kind of retribution on their part. Maybe I shouldn't have listed them being boot lickers as a reason for leaving.