An employee who we recently sacked still had login details to paypal and managed to transfer himself £6000 via Direct Debit even though we cancelled all the associated cards and also changed the passwords so we cant login. Paypal wont talk to me as I dont have the login details, has anyone else had a similar problem before?