PayPal, Inc. 是一个风险与问责案例，关键问责问题在于：撞库是攻击者的行为，但平台仍然控制着检测阈值、摩擦机制、通知内容、恢复证明以及受影响用户的支持路径。该公开记录对消费者、小型卖家、反欺诈团队、监管机构、支付平台运营商、银行以及身份风险管理者有意义，他们需要证据表明账户滥用已被遏制和补救，而非简单归咎于密码复用。
PayPal, Inc. is a risk and accountability case because the accountability issue is that credential stuffing is attacker behavior, but the platform still controls detection thresholds, friction, notification, recovery proof, and the support path for affected users. The public record matters for consumers, small sellers, fraud teams, regulators, payment-platform operators, banks, and identity-risk managers needed evidence that account abuse was contained and remediated without simply blaming password reuse.
