eBay hacked two months ago--Change your passwords

[tomturbomatic]

From CNN Money:
Hackers quietly broke into eBay two months ago and stole a database full of user information, the online auction site revealed Wednesday.
Criminals now have possession of eBay (EBAY, Fortune 500) customer names, account passwords, email addresses, physical addresses, phone numbers and birth dates.

The company said the passwords were encrypted, but there's no telling when or if the hackers can decrypt them. As a precaution, eBay is asking everyone to reset their passwords Wednesday afternoon -- but not yet.

The company isn't saying how many of its 148 million active accounts were affected -- or even how many customers had information stored in that database. But an eBay spokeswoman said the hack impacted "a large number of accounts."

EBay's subsidiary, PayPal, said it was untouched by the data breach. PayPal data, which is sensitive because it includes payment information, is kept on a separate network.

My two cents: This is strange about PayPal because I got an email from PayPal saying that my info was not up to date and they wanted me to FAX all kinds of information including my SSN to them. Like I am going to do that.

 

[danemodsandy]

Tom:

Both PayPal and eBay get "spoofed" a lot - nogoodniks send you emails cleverly disguised to look like legit communications from these companies, asking for details.

The way to deal with them is the same for both companies. Forward a suspected PayPal spoof to [email protected] . You will soon get an email back advising you whether the original email was legit - and it almost never is.

Same with eBay - [email protected] .

Just remember to FORWARD the email - don't cut and paste into a new email. Without the all-important header information from the email you received, eBay and PayPal don't have the necessary info to use in their efforts to shut down spoofers.

 

[tomturbomatic]

Thank you very much.

 

[launderess]

Yes, One Knew

About this and took action at that time.

Something funny was going on one day when on eBay. Got a message both via their system and email saying the email address associated with my account had been changed. Quickly contacted eBay security and also changed it back as well as one's password.

Several months ago apparently someone tried to associate themselves with my eBay account causing *me* a suspension for suspicious behavior. Took an hour on the telephone with eBay to sort that out.

 

[58limited]

I've had no problems this time and changed my password when I saw the article today. Several years ago I had my ebay account hijacked, but I was able to immediately hijack it back.