Quite true; I should have known better. I was using a random 10 character sequence of upper/lower case letters, numbers and special characters and thought that was good enough. :gaah:
I've taken steps that should prevent it from happening again.
And Paypal was very efficient about the situation, they have already issued full credit to my account.