Not certain if they have been hacked and had client info disclosed, but then again there are tons of phishing correspondences where the persons jack your PayPal info.