No institution, whether paypal or banks, are completely fail safe, if someone knows what they are doing they can and do get in.

Change your own password regularly at banks and paypal etc.

I only use the interbanking sites that have a keycode tag that I enter whenever I want to pay or transfer funds to a third party.