https://apps.web.maine.gov/online/aeviewer/ME/40/766753f1-f9c7-4dc5-9a5c-fe0f3ff51c06.shtml * Skip First Level Navigation * Skip All Navigation Office of the Maine Attorney General * Contact Us | * News | * Frequently Asked Questions | * Sitemap Search AG Office [ ] [Search] * Home * News & Reports * Consumer Information * Consumer Law Guide * Crime and Victims * Forms & Sample Documents Home > Consumer Information > Privacy, Identity Theft and Data Security Breaches > Data Breach Notifications * Consumer Complaints and Questions * Privacy, Identity Theft and Consumer Scams + Identity Theft + Privacy + Scams - Phone, Mail, Internet and Pyramid + Do Not Call/Mail * Purchasing Goods & Services * Housing (Houses, Apartments, Mobile Homes) * Charities and Public Benefit Corporations * Tobacco * Antitrust Data Breach Notifications Entity Information * Type of Organization: Financial Services * Entity Name: PayPal, Inc. * Street Address: 2211 N. First Street * City: San Jose * State, or Country if outside the US: CA * Zip Code: 95131 Submitted By * Name: Avi Gesser * Title: Partner * Firm name (if different than entity): Debevoise & Plimpton LLP * Telephone Number: 2129096577 * Email Address: agesser@debevoise.com * Relationship to entity whose information was compromised: Outside Counsel Breach Information * Total number of persons affected (including residents): 34942 * Total number of Maine residents affected: 146 * If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: * Date(s) Breach Occured: 12/06/2022 * Date Breach Discovered: 12/20/2022 * Description of the Breach: + Other + If other, please specify: Credential Stuffing * Information Acquired - Name or other personal identifier in combination with: Social Security Number Notification and Protection Services * Type of Notification: Electronic * Date(s) of consumer notification: 01/18/2023 * Copy of notice to affected Maine residents: Individual Notification Template.pdfMaine - Notice of Data Breach.pdf * Date of any previous (within 12 months) breach notifications: * Were identity theft protection services offered: Yes * If yes, please provide the duration, the provider of the service and a brief description of the service: 24 month Equifax identity protection and credit monitoring * Electronic Maine Security Breach Reporting Form * Maine Data Breach Notices (12/6/2018 - 9/14/2020) (MS Excel) * Maine Data Breach Notices (8/1/2010 - 12/5/2018)(MS Excel) Credits InfoME Copyright (c) 2014 All rights reserved. Information * Maine.gov * Office of the Maine Attorney General * Site Policies If content on this page is inaccessible and you would like to request the information in a different format, please contact (207) 626-8800 and it will be provided to you.