Viewing a single comment thread. View all comments

RaveDigger t1_j52ucfh wrote

Reply to comment by fwubglubbel in PayPal says hackers accessed sensitive data of ~35K users, including addresses and social security numbers, in a credential stuffing attack in December 2022 by iingot

I made the mistake of taking payment for something using PayPal and I couldn't withdraw the money without giving them my SSN. Such fucking bullshit and now even worse that it's been leaked. This is why I didn't want to give you my SSN PayPal! Fuck you!

16

Suspicious_Ram t1_j5326qt wrote

Just to make sure you understand, this is a credential stuffing breach. You would have had to use a shared password on PayPal and a different compromised site. If this does apply to you, you really need to think about changing all your passwords and make sure they’re unique per site or at least unique for each high level of risk site. IE banking, financial, isp/cellular, medical, email high risk. Social media medium. Forums low risk. Etc..

8

RaveDigger t1_j532ykm wrote

Ahhh, thank you for the explanation. I'm probably safe because I use bitwarden to auto generate complex and unique passwords for anything important. I honestly don't even know my PayPal password.

Either way fuck them for holding my money ransom.

2