More information is needed to really make sense of the situation. Does your father have a PayPal account? Has he purchased anything recently?
Even though PayPal itself may have not been affected by the Heartbleed exploit, many other websites use Open SSL which could of been affected. The transaction that is leaked on the search result should show which website it took place on, and from there you can find out if that website's online store had used Open SSL 1.0.1 which had the Heartbeat function.
If this is so, you should notify the webmaster of that address immediately.
___________________________________________
Something with less than three legs, but more than two.
