PayPal will pay a $2 million civil fine over cybersecurity failures that led to the exposure of customers' Social Security numbers, New York state's financial services superintendent Adrienne Harris said on Thursday.