Latest / California / January 2023
PayPal, Inc.
PayPal, Inc. notified California AG on Jan 18, 2023 of a data breach, which occurred on Dec 6, 2022. Data exposed: Social Security number, Date of birth, Tax ID / EIN / ITIN, Postal address, Name.
All 3 filings by PayPal, Inc., state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)
- Organization
- PayPal, Inc.
- Source
- California AG · source record
- Date reported
- Jan 18, 2023
- Date(s) of breach
- Tuesday, December 6, 2022
- Residents affected
- Not published by this source
- Data exposed
- Social Security number Date of birth Tax ID / EIN / ITIN Postal address Name
- Notice letter
- Sample notice (PDF)
- Discovered
- Dec 20, 2022, as stated in the letter"On December 20, 2022, we confirmed that unauthorized parties were able to access your PayPal customer account using your login credentials."
- Days to notice
- 29 days from discovery (Dec 20, 2022) to the California record (Jan 18, 2023). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
- Offered in the letter
- 24 months of credit or identity monitoring through Experian
- First seen by BreachTally
- 2026-10-30 16:00 UTC
Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.
Other filings by PayPal, Inc.
| Organization | State | Reported | Residents affected |
|---|---|---|---|
| PayPal, Inc. | MA | Feb 19, 2026 | 1 |
| PayPal, Inc. | OR | Jan 18, 2023 | 34,942 |
Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.