I recently had an unauthorized Yahoo email address added to my PayPal account. Fortunately I was still able to log onto my account, so I removed the unauthorized email address and updated my password. Best I can tell is it may be related to a recent 1.5 billion trove of breached email addresses (see nosecrets dot peerlyst dot com), which the original email address I had associated with my PayPal account was on. I removed that email address as part of the clean up. No financial impact from all of this, luckily enough. Of special note is the poor performance of PayPal Security in my incident - they were of zero help. The link they provide in the notification emails telling you an email address had been added and to click if the email address is not authorized simply dumps you at the generic Help website for PayPal. I could not find specific information as to what to do or other recommended actions to take. Sending a note to contact them has netted me no response after more than 48 hours. Very disappointed with them, and if I get a chance to make use of an alternative product I will let my closing of my PayPal account give notice of how I feel about them.
