paypal.com

Disclosed Sep 15, 2026

Records

Files

Added

Sep 26, 2026

Exfiltration from PayPal's contact-center network operated by Transcom. The archive contains approximately 75 million network connection/flow records from the contact-center environment, including paypalcorp.com Citrix and authentication system flows, workstation-to-service connection logs, and live database credentials. Data is partitioned across 6 TSV files covering multiple time windows. VLAN labels reference PayPal and Vinted WiFi segments, suggesting a shared Transcom contact-center facility serving multiple clients.

Data found in this dataset

Username

Search this dataset

Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.

Request access

Source files

Expand any file to inspect its column headers and the field each maps to.

README.txt

0 rows

No column mapping was recorded for this file.

ce_paypal-transcom_1788454800_0.tsv

0 rows

File structure

Format: CSV·Delimiter: Tab·Has header: no·Quote: none

Notes: No PII columns identified; all fields are internal IDs, connection metadata, or system logs. The data appears to be network flow records from PayPal's contact-center infrastructure, containing no personal or account data.

ce_paypal-transcom_1788629100_0.tsv

0 rows

File structure

Format: CSV·Delimiter: Tab·Has header: yes·Quote: "

Notes: No PII columns detected; all values are internal IDs, network data, or non-personal metadata.

ce_paypal-transcom_1788803400_0.tsv

0 rows

File structure

Format: CSV·Delimiter: Tab·Has header: yes·Quote: "

Notes: No PII columns detected; all columns are internal IDs, connection metadata, network identifiers, or status flags. Sample contains GUIDs, IP addresses, VLAN labels, and protocol data — none constitute personal PII.

ce_paypal-transcom_1788968580_0.tsv

0 rows

File structure

Format: TSV·Delimiter: Tab·Has header: no·Quote: none

Notes: No PII columns present in the sample; all columns contain internal IDs, connection details, network data, or placeholder values.

ce_paypal-transcom_1789123500_0.tsv

0 rows

File structure

Format: CSV·Delimiter: Tab·Has header: yes·Quote: "

Notes: No PII columns detected. All columns are internal IDs, network identifiers, or system metadata. No personal or contact information present in the sample.

ce_paypal-transcom_1789341600_0.tsv

0 rows

File structure

Format: CSV·Delimiter: Tab·Has header: yes·Quote: "

Notes: No PII columns detected in the sample. All columns appear to contain internal system identifiers, network connection data, or empty values. The data consists of network flow records from PayPal's contact-center environment, with no personal information exposed in the provided sample.

creds_paypal-transcom__records.csv

16 columns1 rows

File structure

Format: CSV·Delimiter: Comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence
1	username	high
2	password	high
3	password	high
4	username	high
7	username	high
8	password	high
9	username	high
10	password	high
13	password	high
14	username	high
15	password	high
16	username	high
18	password	high
19	username	high
22	username	high
23	password	high

Notes: All columns are credentials (username/password) for various database systems and interfaces; no personal PII fields like names, emails, or addresses are present.