More from USA Today: Brokaw's multiple myeloma called incurable but treatable Why people love to hate - and love - Starbucks Strong earthquake shakes western China  A skimmer is a device fixed to the front of an ATM or point-of-sale terminal that secretly swipes credit and debit information when customers slip their cards into the machines to withdraw cash or pay for something. This malicious technology has been around for years, but skimmers are constantly improving it, according to cyber security expert Brian Krebs.  A skimmer is a device fixed to the front of an ATM or point-of-sale terminal that secretly swipes credit and debit information when customers slip their cards into the machines to withdraw cash or pay for something. This malicious technology has been around for years, but skimmers are constantly improving it, according to cyber security expert Brian Krebs.  (Read more: Identitytheft rises as crooks get more creative)  PayPal's Marcus did not waste an opportunity to tout his company's security benefits, saying the breach would not have happened if the merchant had accepted PayPal as a form of payment. PayPal says it does not share card or bank account details with merchants when shoppers use the service to buy something.  PayPal is trying to expand from its online roots to become a common way to pay in physical stores. The security of card transactions in retail locations has been questioned recently by the massive theft of customer data from Target.  (Read more: Identity thieves gear up to steal your tax refund)  "Obfuscating card data online, on mobile, and now more and more offline remains one of PayPal's strongest value props," Marcus added on Twitter.  —By Alistair Barr of USA Today
PayPal President David Marcus said his credit card details were stolen and the information was used to finance a spending spree.