PayPal will pay a $2 million civil fine over cybersecurity failures that led to the exposure of customers' Social Security numbers in late 2022, New York state's Department of Financial Services said on Thursday.

New York State Department of Financial Services Superintendent Adrienne A. Harris announced that PayPal (PYPL) will pay a $2M penalty to New

The settlement detailed the missteps PayPal took in the lead-up to the attack and highlighted common risks — both on compliance and security — banks face.