PayPal will pay $2 million in civil fines to New York State's Finance Dept. for exposing customers' Social Security numbers in 2022 because of cybersecurity failures.