I think the paypal response at the bottom needs to be lifted to the top. It's way more terrifying to see "data breach" and "exposed data" when you don't know how many are affected and whether unauthorized access was part of the story or not.