PayPal has been fined $2 million by New York State's Department of Financial Services for cybersecurity failures that exposed customers' Social Security numbers in late 2022. The investigation found that PayPal failed to use qualified staff for key cybersecurity functions and did not provide adequate training, leaving sensitive customer information accessible to cybercriminals for about seven weeks. PayPal has since implemented multifactor authentication and CAPTCHA to enhance security.