A hacker using the handle Chucky_BF is offering a batch of 15.8 million email–password pairs linked to PayPal for sale on a Dark Web marketplace. The data, said to be complete with PayPal-specific URLs across web and mobile endpoints, is being sold for just $750.
According to Hackread, the data samples appear to contain credentials linked to Gmail accounts, including both PayPal’s web and Android login pages, suggesting the data was likely gathered via infostealer malware rather than a breach