PayPal will pay $2 million to settle New York State charges that cybersecurity failures at the firm led to customers' social security numbers being exposed.