PayPal data breach notification
If I read this correctly this is a case of credential stuffing meaning the breach isn&#x27;t really related to PayPal as much as people had credentials stolen other places and had used the same ones at PayPal. Maybe PayPal needs to enforce 2FA if they don&#x27;t already do. 2FA SMS factor should be discontinued for any financial or otherwise important&#x2F;sensitive service as SIM jacking is apparently quite easy.<p>But anyone with properly secured accounts seems to not have been affected by this breach.