eBay hacked - change passwords

[David48]

For those who buy and sell through ebay in Thailand, best to be aware of this news item ...

eBay hacked: 230 million told to change passwords after major cyber attack

More than 230 million eBay customers have been warned that they should change their passwords today after a major cyber attack.

The online marketplace said information was stolen after its servers were hacked in February and early March.

Customer names, encrypted passwords, email addresses, birth dates, physical addresses and phone numbers were on a database that was compromised in the attack.

Here

ebay statement is here

.

[sustento]

Don't forget to change your Paypal password too.

[alfalfa19]

I have not received any email notices from ebay or paypal regarding this issue.

[Crossy]

I have not received any email notices from ebay or paypal regarding this issue.

Nor I, but I've changed my passwords anyway.

[KittenKong]

I have not received any email notices from ebay or paypal regarding this issue.

Me neither. Not that I've actually used my Ebay account for the last few years.

Changed both passwords anyway.

[belg]

i guess that is a good tip for all those working illegally without a work permit on ebay here in thailand

[yankee99]

Looks legit

"eBay Inc.Download Print Share

eBay Inc. To Ask eBay Users To Change Passwords

SAN JOSE, Calif.--(BUSINESS WIRE)-- eBay Inc. (Nasdaq: EBAY) said beginning later today it will be asking eBay users to change their passwords because of a cyberattack that compromised a database containing encrypted passwords and other non-financial data. After conducting extensive tests on its networks, the company said it has no evidence of the compromise resulting in unauthorized activity for eBay users, and no evidence of any unauthorized access to financial or credit card information, which is stored separately in encrypted formats. However, changing passwords is a best practice and will help enhance security for eBay users.

Information security and customer data protection are of paramount importance to eBay Inc., and eBay regrets any inconvenience or concern that this password reset may cause our customers. We know our customers trust us with their information, and we take seriously our commitment to maintaining a safe, secure and trusted global marketplace.

Cyberattackers compromised a small number of employee log-in credentials, allowing unauthorized access to eBay's corporate network, the company said. Working with law enforcement and leading security experts, the company is aggressively investigating the matter and applying the best forensics tools and practices to protect customers.

The database, which was compromised between late February and early March, included eBay customers' name, encrypted password, email address, physical address, phone number and date of birth. However, the database did not contain financial information or other confidential personal information. The company said that the compromised employee log-in credentials were first detected about two weeks ago. Extensive forensics subsequently identified the compromised eBay database, resulting in the company's announcement today.

The company said it has seen no indication of increased fraudulent account activity on eBay. The company also said it has no evidence of unauthorized access or compromises to personal or financial information for PayPal users. PayPal data is stored separately on a secure network, and all PayPal financial information is encrypted.

Beginning later today, eBay users will be notified via email, site communications and other marketing channels to change their password. In addition to asking users to change their eBay password, the company said it also is encouraging any eBay user who utilized the same password on other sites to change those passwords, too. The same password should never be used across multiple sites or accounts.

About eBay Inc.

eBay Inc. (NASDAQ: EBAY) is a global commerce and payments leader, providing a robust platform where merchants of all sizes can compete and win. Founded in 1995 in San Jose, Calif., eBay Inc. connects millions of buyers and sellers and enabled $205 billion* of commerce volume in 2013. We do so through eBay, one of the world's largest online marketplaces, which allows users to buy and sell in nearly every country on earth; through PayPal, which enables individuals and businesses to securely, easily and quickly send and receive digital payments; and through eBay Enterprise, which enables omnichannel commerce, multichannel retailing and digital marketing for global enterprises in the U.S. and internationally. We also reach millions through specialized marketplaces such as StubHub, the world's largest ticket marketplace, and eBay classifieds sites, which together have a presence in more than 1,000 cities around the world. For more information about the company and its global portfolio of online brands, visit www.ebayinc.com.

* This adjusted number reflects decision to remove vehicles and real estate GMV from ongoing total GMV and ECV metrics (previously stated ECV for 2013 was $212 billion, incorporating vehicles and real estate GMV).

eBay Inc.

Investor Relations Contact:

Tracey Ford

[email protected]

Tom Hudson

[email protected]

or

Media Relations Contact:

Amanda Miller

[email protected]

or

Investor Information Request:

408-376-7493

or

Company News:

http://www.ebayinc.com/news

or

Investor Relations website:

http://investor.ebayinc.com

Source: eBay Inc.

News Provided by Acquire Media"

[David48]

I am surprised that there is a little scepticism that the story wasn't legit.

Here http://www.theaustralian.com.au/business/wall-street-journal/ebay-tells-users-to-change-passwords-after-hackers-steal-database/story-fnay3ubk-1226926440542 is the article from the Australian Newspaper which is reprinting the article from the Wall Street Journal.

The link from News Corp ... http://www.news.com.au/technology/ebay-urges-customers-to-change-passwords-after-massive-cyberattack-on-databases-no-paypal-breach/story-e6frfrnr-1226926364881

[yankee99]

With so much phishing going on i for one didnt believe it. So i went to their (ebay) investors relations page for confirmation.

[sometimewoodworker]

Don't forget to change your Paypal password too.

While changing passwords on a regular basis and as a precautionary measure is never bad. E-bay do say that AFATK paypal was not affected.

[RichCor]

Thread already ongoing in the ThaiVisa Internet, computers, communication, technology Forum: Change your Ebay & Paypal Password Now.

I am surprised that there is a little scepticism that the story wasn't legit.

[...]

The reason for some initial skepticism with EBAY may be due to the mishandling of the initial notification causing confusion with the absolute lack of follow-on information (detailed or otherwise). EBAY later followed up with an official Press Release and a buried website notification.

Also, as someone already stated, it wouldn't be the first time that someone used a Breach Notification to gather user/pass with a misdirected link or a man-in-the-middle play.

EBAY really should suspend all user account logins until the user authenticates and changes the password on their accounts.

At the least they should put a splash page up with a notification. Right now they're doing next to nothing.

[phazey]

From an earlier thread:

http://www.thaivisa.com/forum/topic/728042-change-your-ebay-paypal-password-now/

[Chicog]

Don't forget to change your Paypal password too.

While changing passwords on a regular basis and as a precautionary measure is never bad. E-bay do say that AFATK paypal was not affected.

Yes and they've spent the last three months not admitting that they've been compromised.

I'd change it anyway just to be sure, if they're that lax there's every chance they've had other breaches.

[how241]

I have not received any email notices from ebay or paypal regarding this issue.

+1...is this story for real ? I have not been notified by e-bay.

[David48]

From an earlier thread:

http://www.thaivisa.com/forum/topic/728042-change-your-ebay-paypal-password-now/

Sorry Mate ... I didn't think to check there ... I only only searched the World News.

[CaitlinHappyMeal]

Hi, it's been on uk tv news reports for the last 2 days to change just the ebay password ?

[Chicog]

If they didn't know about ebay for months I would change PayPal password too. It takes 2 minutes for heavens sake.

Sent from my SM-G900T using Thaivisa Connect Thailand mobile app

[lopburi3]

This is displayed on Ebay website