PayPal reportedly hacked



Guess it is time for me to just close my account. Already had taken out my credit card information due to the steam changes, but I guess it was for the better.

I closed my PayPal account over a year ago due to attempted hacking. The only connection I have right now is that CD Keys uses them for payment processing. I have a couple of transactions through that site but I doubt it can impact me.
 
Last edited:
Music Video Wtf GIF
 
Are there any other sources for this?
Last time one of these "website hacked" rumors got posted I spent an hour changing all my passwords and then we found out it wasn't even true
 
Last edited:
This just reminded me that I have been wanting to close that account for awhile and never found the time to do it. It took me a few minutes and is now done. Thanks for the reminder.
 
I dont get how people still use this shitty service even now. You can literally use your own credit card or buy top up cards from a third party website and still get charged way less than what PP takes. Dont even get me started on getting paid through paypal. Hope the app gets obliterated.
 
Honestly seems like fake news.

There is no way PayPal stores passwords plaintext.

But of course, there are millions of known email : password pairs out there - some might just work on PayPal.
Anyway, always a good idea to check services like https://haveibeenpwned.com/ and change passwords accordingly.
 
Last edited:
I dont get how people still use this shitty service even now. You can literally use your own credit card or buy top up cards from a third party website and still get charged way less than what PP takes. Dont even get me started on getting paid through paypal. Hope the app gets obliterated.
its easy for us who have a bunch of stuff and do not want to put are cc numbers in all the time.
 
I have strong doubts that this is actually PayPal which got hacked. Like others said, PayPal isn't storing passwords in clear text.

I changed my password just in case, but also have passkeys and 2FA enabled in either way.

Also, in US there aren't great alternatives to PayPal if you don't want to share your CC info with different sites. There is Venmo… which is owned by PayPal. I also use ApplePay but most websites don't take that (or Google Pay).
 
Just enable two factor authentication. On everything. Problem solved.

I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).
 
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).
The worst is when the site your accessing sends an email code. But the code gets delayed. And it only works for 10 minutes. So it finally comes, you enter it and it's expired. Then request another code and hope it comes in time.

Many third party supplier sites do this to access their database. Pain in the ass.
 
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).
Ok, I will bite. How is enabling 2FA "going to bat for the surveillance state"?
 
Probably bullshit but it never hurts to change passwords.

Also on the subject of Paypal, I switched all my transactions where possible to them some 15 years or so after my third debit card breach, and haven't had a security problem since. Not one.

I'm aware of the horror stories, they're always going to happen, but my experience has been entirely trouble-free.
 
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).
This is bat shit crazy…

A surveillance profile on users? Like when they logged in, what pages they visited, what they bought/interacted with.

So basically all information you could get by normally logging into the site and tracking a user - as all sites have done for the past 20 odd years. Or maybe it's the phone companies that are tracking what we are doing one 6 digit code at a time!

You conspiracy nut jobs make me crack up man. It's there as a backstop because some people are incapable of using a password manager and reuse the same passwords across multiple sites. That's it…
 
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).

You do realize that you can use an Authenticator app to deal with 2FA? No need to receive codes by email or phone.
For example, I use Proton Authenticator. Mostly because this company has a strong focus on privacy and security.


But you can also use Google, Aegis, Microsoft, etc.
Or better yet, get rid of passwords and 2FA and just use a FIDO2 key.



Here is an explanation, by IBM secueity, of what 2FA is and why it's important. And also what FIDO is and why it's important and convenient.



 
Last edited:
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).
Tin Foil Tinfoil Hat GIF
 
Top Bottom