Online payments giant PayPal has confirmed a data breach linked to its PayPal Working Capital (PPWC) loan product.
The issue reportedly stemmed from a coding error in the PPWC loan application system, which may have exposed sensitive personal information for more than five months.
While PayPal says the number of affected customers is small, the nature of the data involved means the incident raises important questions, including whether UK users could be impacted.
What happened in the PayPal data breach?
According to breach notifications sent to affected users, an unauthorised party gained access to certain PayPal Working Capital data between 1 July 2025 and 12 December 2025. PayPal says the issue was discovered in December and that access was terminated promptly once identified.
A spokesperson has stated that approximately 100 customers were potentially affected.
Some reportedly experienced unauthorised transactions, which PayPal says have now been refunded.
Impacted users have also had their passwords reset.
The information that may have been accessed includes:
- Name
- Email address
- Phone number
- Business address
- Date of birth
- Social Security number (SSN)
The inclusion of Social Security numbers strongly suggests that at least some affected users were based in the United States. However, PayPal has not publicly confirmed that only US users were impacted.
Does this affect people in the UK?
Possibly — but only in limited circumstances. The breach relates specifically to PayPal Working Capital, which is a business finance product. It is not a standard personal PayPal account feature.
PayPal Working Capital has historically been available in the UK. That means UK businesses who applied for or used the product during the affected period could, in theory, be impacted.
That said, at the moment:
- The reported number of affected users is small
- References to Social Security numbers indicate US involvement
- There is no indication of widespread impact on UK consumer accounts.
If you are a UK personal PayPal user who has never used PayPal Working Capital, this breach is unlikely to affect you.
What should affected users do?
If you receive a notification from PayPal that you are affected by this breach:
- Review your transaction history carefully
- Reset your password (even if already prompted to do so)
- Enable two-factor authentication if you have not already
- Be alert to phishing emails referencing loans or account activity.
PayPal is reportedly offering two years of complimentary credit monitoring through Equifax to affected users.
A reminder about phishing risks
Criminals rely on confusion and urgency. So, even if you are not directly impacted, incidents like this often trigger waves of scam emails and fake “security alerts”.
If you receive an email claiming to be from PayPal:
- Do not click links immediately
- Log in directly via the official website or app
- Never share one-time passcodes or passwords.
PayPal has reiterated that it will never ask for your password or authentication codes over email or phone.
We will continue to monitor updates, particularly if confirmation emerges about UK users being directly impacted. If further details suggest broader exposure, we will publish a full update explaining what it means, and what your options are.
