A lapse in cyber security that led to personal data being exposed has earned PayPal a multimillion-dollar fine.