I was going through a PayPal checkout today while buying something, when the login window didn't accept my password. I thought it was strange, since I haven't changed my password and recently bought something else just fine, but I didn't think much of it.
I clicked the "having trouble logging in?" button and this is where things got strange. I attempted to change my password through the mobile option, and noticed that the number listed was not one I recognized. It was the same area code as mine, but definitely did not belong to me. I was able to input my own phone number and complete the purchase, but afterwards I logged into my account to check if anything had been compromised.
No transactions other than mine have been made. Everything is in order; the only things that were mysteriously changed were my password and the mobile number associated with my account (the original one was still in the account; the new one was just added on top). While this is reassuring, I'm now afraid that someone might have my personal information, if they did breach my account.
What steps should I take to be more secure after this? Was this an actual security breach? Why weren't any transactions made by the perpetrator?
In the meantime, I have changed my password to something else, because it's all I could think of.
Thank you for your time.
