Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
eBay got hacked - change your password.
- Thread starter maflynn
- Start date
- Sort by reaction score
From the link, it appears that Paypal is unaffected, as it is on an entirely different network, so you should be okay there.
But this happened 2 months ago. I understand needing time for full disclosure and preventative measures, but that is a good chunk of time. What gets me is that their PR release about this doesn't indicate a date on when the statement went out, so it's even harder to verify time on this or what happened when.
Nevertheless, ebay password changed. Thanks for the PSA!
EDIT: What concerns me more is the amount of information they were able to get. All of it is PII data (Personal Information), some of it makes up some of the challenge questions banks use to identify you. While not critical info requiring encryption of that data, everyone using ebay should check their banks and monitor credit reports as well.
BL.
The hack started two months ago but eBay itself didn't discover it until two weeks ago.
From the OP's link:
Makes even more sense now. That's swifter action. Thanks for the clarification.
BL.
Slowly but steadily we descend to the days when tribal customs safeguarded doing business with strangers
Take item to marketplace, accompanied by hostage negotiator, designated hostage, a passel of warriors and some backup horses or camels.
Make the hostage and negotiators comfortable. Remind warriors they are there to guard the hostages and the negotiators, not to squabble with either negotiator over how much of a bribe it would take to look the other way while other guys hostage disappears.
Start the pre-transaction process: look the stuff over, bite the gold piece, etc.
Looks good? Swap items and go home.
Looks not so great? Use your imagination. This is not like getting hacked. This is like, you know, getting HACKED.
Notice that no paypal, bank, credit card or other middleman ever got involved here. All that was ever at risk was just a couple of hostages, one from each tribe plus the accessories to mind those hostages. You know your mother in law, youngest brother, etc. and some guys from the hood to look after them.
Fact: I was thinking of reviving a PayPal setup the other day because I was looking for an old PowerBook to cannibalize for parts. Think Ill stick to the tribal ways for now. Thanks for the heads up.
Take item to marketplace, accompanied by hostage negotiator, designated hostage, a passel of warriors and some backup horses or camels.
Make the hostage and negotiators comfortable. Remind warriors they are there to guard the hostages and the negotiators, not to squabble with either negotiator over how much of a bribe it would take to look the other way while other guys hostage disappears.
Start the pre-transaction process: look the stuff over, bite the gold piece, etc.
Looks good? Swap items and go home.
Looks not so great? Use your imagination. This is not like getting hacked. This is like, you know, getting HACKED.
Notice that no paypal, bank, credit card or other middleman ever got involved here. All that was ever at risk was just a couple of hostages, one from each tribe plus the accessories to mind those hostages. You know your mother in law, youngest brother, etc. and some guys from the hood to look after them.
Fact: I was thinking of reviving a PayPal setup the other day because I was looking for an old PowerBook to cannibalize for parts. Think Ill stick to the tribal ways for now. Thanks for the heads up.
Ebay Hacked!
Not surprised. Was waiting for the day this was going to happen. Am surprised that it took eBay so long to find it. I realize not so easy to find sometimes but their safeguards must certainly be better than average. They must have some kind of team that monitors for this kind of thing. But what do I know. I am not knowledgeable in this area of security.
Oh well, passwords updated and we shall see what the fallout brings. Hopefully nothing bad to my account, but certainly eBay will suffer some for a little while.
Quoted:
"eBay's morning just went from bad to worse. The e-commerce site confirmed Wednesday that its corporate network was hacked and a database with users' passwords was compromised. While eBay says there is no evidence that users' financial information was accessed in the hack, the company is telling all users to change their passwords.
eBay contacted CNET after this story was initially published, saying it discovered "recently" that it was a victim of "a cyber attack on our corporate information network, which compromised a database containing eBay user passwords." The company's spokesperson told CNET there is "no evidence that any financial information was accessed or compromised."
The statement follows an odd stream of events this morning when eBay-owned PayPal posted a blog entitled "eBay, Inc. to Ask All eBay users to Change Passwords." The blog post included nothing but the title, but quickly hit the Web after it was retweeted dozens of times. The blog post was then taken down from PayPal's site, causing even more confusion for users of the online auction house."
Not surprised. Was waiting for the day this was going to happen. Am surprised that it took eBay so long to find it. I realize not so easy to find sometimes but their safeguards must certainly be better than average. They must have some kind of team that monitors for this kind of thing. But what do I know. I am not knowledgeable in this area of security.
Oh well, passwords updated and we shall see what the fallout brings. Hopefully nothing bad to my account, but certainly eBay will suffer some for a little while.
Quoted:
"eBay's morning just went from bad to worse. The e-commerce site confirmed Wednesday that its corporate network was hacked and a database with users' passwords was compromised. While eBay says there is no evidence that users' financial information was accessed in the hack, the company is telling all users to change their passwords.
eBay contacted CNET after this story was initially published, saying it discovered "recently" that it was a victim of "a cyber attack on our corporate information network, which compromised a database containing eBay user passwords." The company's spokesperson told CNET there is "no evidence that any financial information was accessed or compromised."
The statement follows an odd stream of events this morning when eBay-owned PayPal posted a blog entitled "eBay, Inc. to Ask All eBay users to Change Passwords." The blog post included nothing but the title, but quickly hit the Web after it was retweeted dozens of times. The blog post was then taken down from PayPal's site, causing even more confusion for users of the online auction house."
Last edited:
Given how intertwined paypal and ebay are, I chose not to take a chance.
Brilliant thinking! I changed both passwords just now too. Thanks for the heads up.
Yup I did the same thing. Since they are both connected who knows if they are able to deduce your paypal account from your ebay account. Can never be too safe.
Since all you smart guys changed both passwords, and since I'm not so smart but maniacal about security...I changed both passwords, too.
OK, changing password from ebayuser to ebayrulez - should be easy to remember, plus its 8 characters so its totally secure, right?
Given how intertwined paypal and ebay are, I chose not to take a chance.
Did the exact same thing earlier this morning only took about 30 seconds for both websites thanks to 1password... It is a cheap plug but credit must be given where it is due
I just tried to change it and they won't let me. "Try later". What in gods name is going on where they won't let you change your password?
They must be having system problems or even a flood of people going to the site to update their passwords.
Changed mine today using Lastpass's password generator. All my login's have generated complex passwords. I change them at least a couple of times a year just to be safe
Since all you smart guys changed both passwords, and since I'm not so smart but maniacal about security...I changed both passwords, too.
See to me that sounds like the coffee talking...!
Sigh, of I go to change all my passwords. Very annoying.
It seems some have better security than others, for instance Amazon tells you it gets hacked on a daily bases, and so far....... they have not been successful so it makes you wonder what do they do that is different to ebay? Then again a British man in Britain can hack into the US Military defence networks sooo......
Guess it's the world we live in?
It seems some have better security than others, for instance Amazon tells you it gets hacked on a daily bases, and so far....... they have not been successful so it makes you wonder what do they do that is different to ebay? Then again a British man in Britain can hack into the US Military defence networks sooo......
Guess it's the world we live in?
See to me that sounds like the coffee talking...!
Coffee is something about which I am beyond maniacal...
I am seriously thinking of jumping on the 1Password train. Getting difficult to manage all of my passwords and think this just might be the tipping point.
I waited for the Christmas sale at 25% off and then it was 50% when Heartbleed showed up. I really enjoy the Mac/Windows bundle. Though the Android password reader app could use some more polish to bring it in line with the iOS version.
I strongly recommend it and it's cross platform. I do still have a few old notes in Keychain Access.
I'm not knocking 1Password, but would suggest giving LastPass a look. I've been using it for a long time, and it does everything I need, is cross platform, and is free. Don't let the free part put you off...it's really a good app.
Well, they didn't really need to try hard to hack in, as the BBC news reports they gained access to a 'small number of employees credentials' and off they went...
http://www.bbc.co.uk/news/technology-27503290
This is the trouble now a day's, systems still have the human weak links. They can use so many tricks to get employee usernames and passwords.
http://www.bbc.co.uk/news/technology-27503290
This is the trouble now a day's, systems still have the human weak links. They can use so many tricks to get employee usernames and passwords.
I, too, use LastPass and love it. I'm sure 1Password is excellent too, but I started with LastPass and that's where I'll stay.