Editor's Note: PayPal has reached out to Tom's Guide about this stolen data, confirming there wasn't a breach and that the exposed information is related to a security incident from back in 2022. Original story follows below:
A post on a well-known hacking forum has claimed to have a dataset of millions of PayPal account credentials including login emails and plaintext passwords. As reported by Cybernews, the author of the post claims the stolen data was taken from May 2025 and includes 15.8 million login emails, passwords, associated URLs and variants from accounts worldwide.
