{"id":57628,"date":"2025-08-20T15:56:39","date_gmt":"2025-08-20T13:56:39","guid":{"rendered":"https:\/\/www.apfelpatient.de\/?p=57628"},"modified":"2025-08-20T15:56:46","modified_gmt":"2025-08-20T13:56:46","slug":"paypal-data-theft-millions-of-login-details-on-the-darknet","status":"publish","type":"post","link":"https:\/\/www.apfelpatient.de\/en\/news\/paypal-datenklau-millionen-zugangsdaten-im-darknet","title":{"rendered":"PayPal data theft: Millions of login details on the darknet"},"content":{"rendered":"

PayPal is considered one of the most popular online payment methods worldwide. Its ease of use and buyer protection make it the standard for many when it comes to online payments. But now an incident is causing concern: A hacker claims to have obtained millions of login credentials. It's not yet been conclusively proven whether all the information is correct, but the threat to PayPal accounts is real.<\/strong><\/p>\n\n\n\n

Data thefts have become part of everyday life online. This becomes particularly explosive when it comes to login credentials for payment services like PayPal, which are directly linked to bank accounts or credit cards. In the current incident, a data package is circulating under the title "Global PayPal Credential Dump 2025." It contains millions of login credentials \u2013 and could affect users worldwide.<\/p>\n\n\n\n

15.8 million access data in circulation<\/h4>\n\n\n\n

In a relevant<\/a> forum, a user named "Chucky_BF" appears with a dubious offer. For 750 euros, he is offering a data package allegedly containing 15.8 million PayPal logins. The package is approximately 1.1 gigabytes in size and, according to his description, contains not only email addresses but also passwords in plain text. Additionally, URLs are linked that could be used together with the login credentials. The data is said to have originated from a leak on May 6, 2025. Initial insights show that the data sets contain both real accounts and test and fake profiles. Such mixtures are not uncommon with stolen data and make it difficult to immediately assess the true extent of the leak.<\/p>\n\n\n\n

Origin of the data<\/h4>\n\n\n\n

Evidence suggests that the data wasn't directly stolen by PayPal itself. It's much more likely that cybercriminals used so-called infostealer malware. This malicious software is installed on infected devices and reads login credentials and other information. This could have led to millions of PayPal login credentials being compromised via users' own computers.<\/p>\n\n\n\n

Risks to affected accounts<\/h4>\n\n\n\n

Trading stolen credentials can have serious consequences. Attackers could make unauthorized withdrawals, misuse accounts for phishing campaigns, or use stolen data for identity theft. While not all of the 15.8 million records are likely to be authentic, even a subset is enough to cause significant damage.<\/p>\n\n\n\n

Recommended immediate measures<\/h4>\n\n\n\n

To mitigate potential risks, some steps are considered particularly important:<\/p>\n\n\n\n