Cyber Incident Victim: PayPal
Date:
Aug 2020
Location:
United Kingdom
Summary
A 15-year-old male from Merseyside was arrested and released under investigation for allegedly compromising multiple UK-based PayPal accounts. Law enforcement, including the Cyber Dependent Crime Unit and Matrix, conducted a search of the suspect's residence, seizing numerous high-value electronic devices such as iPhones, an Apple Watch, AirPods, an iPad, Samsung and Sony phones, along with a mini motorbike. The incident involved unauthorized access to the company's accounts, with the seized items suggesting potential financial gains from the activity.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 26, 2020, Merseyside Police arrested a 15-year-old boy from Merseyside, UK, in connection with the hacking of multiple PayPal accounts belonging to UK residents. The hacking incidents occurred earlier in 2020, though specific dates and the duration of unauthorized access were not disclosed. Authorities executed the arrest as part of an investigation into cyber-dependent crimes targeting financial accounts. Following standard procedural protocols, the suspect was released under investigation pending further inquiries, with no charges formally filed at the time of reporting. The arrest operation involved collaboration between Merseyside Police’s specialized Cyber Dependent Crime Unit and the Matrix unit, a regional organized crime task force.
During the investigation, law enforcement conducted a search of the suspect’s residence, seizing multiple electronic devices and luxury items. Recovered assets included an iPhone 11, iPhone 8, Apple Watch, Samsung phone, Apple Airpods, iPad, Sony mobile phone, and a mini motorbike. The seizure suggested potential financial gains from the alleged activities, though authorities did not confirm whether the items were directly purchased using compromised accounts. No specific details were provided regarding the number of affected PayPal users, the methods used to compromise accounts, or the financial losses incurred. The investigation remained ongoing at the time of reporting, with no public statements from PayPal regarding security measures or notifications to impacted customers. Merseyside Police did not disclose whether additional suspects were involved or if international jurisdictions were engaged in the probe.