In mid february I created a gmail account and only used it to subscribe to Paypal (didn't touch Ebay). The Paypal account is associated to a NY home address. O

In mid february I created a gmail account and only used it to subscribe to Paypal (didn't touch Ebay). The Paypal account is associated to a NY home address. On March 15th I received at that email address a "New York Lotto" phishing email. That is the only spam I got so far on that email account. So I would assume that they have at least some Paypal subscribers data, including email and home city (and maybe address).