A PayPal data breach lead to a small number of unauthorized transactions.

PayPal disclosed that an application error in its PayPal Working Capital loan system exposed customer data for nearly six months. The exposed information included names, contact details, birthdates, phone numbers, business addresses, and Social Security numbers. A small number of customers experienced unauthorized transactions, and PayPal refunded affected individuals. Although PayPal claimed its systems were not compromised, breach notifications indicated unauthorized access had been terminated after detection.

Read more:

https://www.securityweek.com/paypal-data-breach-led-to-fraudulent-transactions/