Many PayPal users are finding out what “credential stuffing attack” means, and why it’s a bad idea to use the same password for everything you do.