EBay Says It Was Hacked, Urges Users to Change Passwords

[tater1977]

EBay Says It Was Hacked, Urges Users to Change Passwords

http://www.newsweek.com/ebay-says-it-wa ... rds-251678

By Reuters

Filed: 5/21/14

(Reuters) - E-commerce company eBay Inc said client identity information including emails, addresses and birthdays was stolen in a hacking attack between late February and early March.

EBay urged users to change their passwords after the attack on a database that also contained encrypted passwords, physical addresses and phone numbers.

The company said it found no evidence of any unauthorized access to financial or credit card information, which is stored separately in encrypted formats.

EBay shares fell as much as 3.2 percent on Wednesday morning after the latest high-profile hacking attack on a U.S. company.

"For the time being, we cannot comment on the specific number of accounts impacted," eBay spokeswoman Kari Ramirez said. "However, we believe there may be a large number of accounts involved and we are asking all eBay users to change their passwords."

EBay said it was investigating the breach and working with law enforcement agencies.

The company also said it had not seen any indication of increased fraudulent account activity on eBay and that there was no evidence that its online payment service PayPal had been affected in the attack.

The attack on eBay was made through compromised employee accounts that allowed unauthorized access to its corporate network, the company said in a statement. It said the breach was first detected about two weeks ago.

"The real key question going forward will be if any money has been stolen, or any unauthorized activity been performed," Wedbush Securities analyst Gil Luria said.

"As long as this is not the case, this thing will come and go and will not be an issue for eBay," Luria said.

EBay earlier issued a notice on its PayPal website asking users to change their passwords, but took down the message a short time later without explanation.

The message, issued at 1:30 a.m. ET, was headlined "eBay Inc. To Ask All eBay Users To Change Passwords" but had no other information other than the words "place holder text".

EBay has been attacked before. In February, hacking group Syrian Electronic Army breached and defaced websites belonging to PayPal UK and eBay. (r.reuters.com/xag59v)

One of the biggest breaches at a U.S. company was at retailer Target Corp, where hackers stole data from up to 70 million credit and debit cards of shoppers who visited its stores during the first three weeks of the holiday shopping season.

Last month, U.S. web media company AOL Inc urged its tens of millions of email account holders to change their passwords and security questions after a cyber attack compromised about 2 percent of its accounts.

EBay shares fell as low as $50.30 in morning trade on the Nasdaq before recovering to $51.68.

[tater1977]

eBay
Important Password Update

http://www.ebay.com/reset?_trkparms=clk ... 5315575173

Keeping Our Buyers and Sellers Safe and Secure on eBay

On Wednesday, we announced that we are asking all eBay users to change their password. This is because of a cyberattack that compromised our eBay user database, which contained your encrypted password.

Because your password is encrypted (even we don’t know what it is), we believe your eBay account is secure. But we don’t want to take any chances. We take security on eBay very seriously, and we want to ensure that you feel safe and secure buying and selling on eBay. So we think it’s the right thing to do to have you change your password. And we want to remind you that it’s a good idea to always use different passwords for different sites and accounts. If you used your eBay password on other sites, we are encouraging you to change those passwords, too.

Here’s what we recommend you do the next time you visit eBay:

1.Take a moment to change your password. You can do this in the “My eBay” section under account settings. This will help further protect you; it’s always a good practice to periodically update your password. Millions of eBay users already have updated their passwords.
2.Remember to always use different passwords on different sites and accounts. So if you haven’t done this yet, take the time to do so.

Meanwhile, our team is committed to making eBay as safe and secure as possible. So we are looking at other ways to strengthen security on eBay. In the coming days and weeks we may be introducing new security features. We’ll keep you updated as we do.

Thanks for your support and cooperation. eBay is your marketplace, and we are committed to keeping it one of the world’s safest places to buy and sell.

Devin Wenig

President, eBay Marketplaces

[YoungJRNY]

I did this. Changed my password reset and got not one but TWO confirmation emails by eBay and it still won't let me in with my new password. Anybody else having this problem?

[tater1977]

I did this. Changed my password reset and got not one but TWO confirmation emails by eBay and it still won't let me in with my new password. Anybody else having this problem?

Changed mine with no problems.
PO'd though that they didn't send email's out
advising folks.
Changed paypal too..just for ease of mind...
even though they say its all encrypted.

[YoungJRNY]

I did this. Changed my password reset and got not one but TWO confirmation emails by eBay and it still won't let me in with my new password. Anybody else having this problem?

Changed mine with no problems.
PO'd though that they didn't send email's out
advising folks.
Changed paypal too..just for ease of mind...
even though they say its all encrypted.

Tried mine again, worked this time. I bet the servers are just getting destroyed with confirmation.

[TageRyche]

Yeah, I had no problem when I changed my password. Logged right back in with the new one.

[Jonny B]

I have an account but I almost never use it. High-budget buyers have priced me out of collecting. It's been years since the last time I bought or sold anything. I ended up having to change the password anyway because I forgot my old password. I probably should have asked the hackers, for they probably knew.