eBay instructs users to change passwords following security breach

A cyber attack on eBay has prompted the online auction house to issue a statement asking all users to change their passwords.
eBay is instructing users to change their passwords after a cyber attack compromised a database containing “encrypted passwords and other non-financial data”.
It stressed that after conducting “extensive” network tests, the company had found no evidence of unauthorised activity of user accounts following the attack.
How did this happen?
eBay has released a statement explaining that a small number of employee log-in credentials were compromised, allowing the perpetrators access to the eBay corporate network.
The auction site said: “Working with law enforcement and leading security experts, the company is aggressively investigating the matter and applying the best forensics tools and practices to protect customers.”
The database, which was compromised between late February and early March is said to have contained eBay customers’ names, encrypted passwords, email addresses, physical addresses, phone numbers and dates of birth.
Users will be notified later today via email, site communications and other marketing channels. eBay called on members who usethe same password for eBay on other sites to change those passwords too, with the advice that the same password should never be used across multiple sites or accounts.
For advice on picking a strong password, read How to protect your PINs and passwords.
Good tips include using at least eight characters, including special characters (eg %, $, ^) in your password and a mix of upper- and lower-case letters. This password generator can produce strong passwords for you to learn and use.
This story has been updated since its original publication
More from lovemoney.com
How to protect PINs and passwords
eBay changes private seller listing fees
Most Recent
Comments
-
Still have received no warning from e-bay but read it in Metro papers. Who checks the e-bay website every day to learn about the threat, unless they have an active interest in buying or selling right now?
REPORT This comment has been reported. -
eBay has now finally confirmed this on its own site: http://www.ebay.co.uk/reset?_trkparms=clkid%3D7077318466569215470
REPORT This comment has been reported. -
So all this stuff is a load of nonsense then? Quelle surprise! I'll go back to sleep now.
REPORT This comment has been reported.
Do you want to comment on this article? You need to be signed in for this feature
23 May 2014