Are often the hardest for people to grasp.
Anything done online should never be considered secret.
And yes Clear, PayPal can deny it, but it has been hacked. Every hacking claim these guys have made has turned out to be true. Even if it takes a few months for the victims to admit it.
http://www.theepochtimes.com/n2/world/paypal-symantec-reportedly-hacked-on-guy-fawkes-day-311454.html