Credential Stuffing Attack

35,000 accounts were compromised in December by a credential stuffing attack. The company says that it sees no evidence that money was moved out of PayPal accounts or that unauthorized charges were made.