I created a PayPal Key months ago and never used it anywhere. Just this morning I noticed two fraudulent charges using this key for the method of payment.
It seems someone either guessed the info (very unlikely), figured out how the generation algorithm works, or hacked the PayPal database that holds this information.
The charges have been reported obviously but my primary concern is how the fraudster got access to this information and what other information of mine may be leaked as well. Do they know my zip code, my email, etc?
From the support team I only got that the PayPal Key so far generates: "Receive a secure PayPal Key with its own virtual card number, expiration date and security code"
So the fraudster would have needed to use all that information at least.
