A lapse in cybersecurity that led to personal data being exposed has earned PayPal a multi-million dollar fine.