Seems the problem is coming from MarkMonitor. Paypal and EBay UK have been breached recently by the same hacker group through MarkMonitor.