That is eBay, not PayPal.

Also I would be a little concerned that it's taken 6 months for eBay to inform you of the hack. Most sites affected by Heartbleed informed those affected almost immediately.