PCI DSS requirements specify that companies have 30 days to refute or remediate externally reported issues [1]. If they don’t respond or fix some of these issues, then PayPal will no longer be compliant and all credit card companies will be forced to stop working with them unless they wish to set precedence that PCI-DSS compliance is no longer required to be followed.
According to this image [2], they did not respond or refute within 30 days.
If PayPal’s PCI-DSS compliance certification isn’t revoked then PCI-DSS is a farce.
According to this image [2], they did not respond or refute within 30 days.
If PayPal’s PCI-DSS compliance certification isn’t revoked then PCI-DSS is a farce.
[1] https://www.itgovernance.co.uk/blog/a-guide-to-the-pci-dsss-...
[2] https://cybernews.com/wp-content/uploads/2020/02/paypal-2fa-...