I agree with Mike - it looks like PayPal did the right thing. And Bill's suggestions for password securoty is excellent. I need to constantly remind my kids to watch what they use as their IDs, too - they always want to use their birthday like it's a badge of honor, but it gives predators a handle on them and also exposes one bit of personal info that can be used to build a credit file.