Overview

• A listing under the alias 'Chucky_BF' offers a 1.1 GB file of email and password pairs tied to PayPal services, shown in a screenshot posted by Hackmanac on X and dated May 6, 2025.
• Hackread reports a mix of genuine, test and fake accounts in the sample, with some passwords unique and long and others reused.
• The seller advertises the cache for fraud, phishing and credential‑stuffing attacks, pricing the full set at about $750.
• PC‑WELT notes the passwords are presented in plaintext and linked to specific PayPal sign‑in URLs, while security expert Troy Hunt says PayPal does not store passwords in plaintext.
• PayPal has not issued a public statement, and outlets advise users to review account activity and change reused passwords.