PayPal, an electronic payment solution provider, suffered a library crash attack, and 34942 users' information was stolen.

CTOnews.com, January 21 (Xinhua)-- payment solution provider PayPal has sent an email to users informing users that the system has recently been hit by a library attack and that some user data may have been compromised.

PayPal explained that the library crash attack occurred between December 6 and December 8, 2022. The company discovered and mitigated the attack at the time, but also began an internal investigation to find out how the hackers gained access to the account.

CTOnews.com learned that PayPal concluded its investigation on December 20, 2022, confirming that an unauthorized third party logged into the account with valid credentials.

PayPal said that through the investigation of the library crash attack, no evidence was found that it was caused by a system vulnerability, and there was no evidence that the attacker stole these user information directly from PayPal.

A total of 34942 users were affected by the incident, according to PayPal's data breach report. During these two days, the hackers obtained the full name, date of birth, postal address, social security number and personal tax number of the account holder.