This impacted the PayPal Working Capital loan app, which provides small business loans to users. Customer names, email address, phone numbers, business address, Social Security numbers, and dates of birth were exposed between July 1 and December 12, 2025. This appears to be have been caused by a "code change" and it does appear attackers found and took advantage of at least some of the information, leading to unauthorized transactions.
This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/02/27/data-breach-roundup-feb-20-feb-26-2026