PayPal will pay a $2 million civil fine over cybersecurity failures that led to the exposure of customers' Social Security numbers in late 2022, New York state's Department of Financial Services said