Ebay hacked

[ronan]

Just heard on the radio that some ebay accounts (and by extension paypal) have been hacked, ebay are advising that you change your passwords.

 

[Welderpaul]

Yeah, it was in February they were hacked....

 

[AndyStobbs]

I swore blind that wasn't my gimp mask

 

[steviec_lj]

PayPal shouldn't have been touched, it's a different server/database entirely. Ebay knew about the hack 2 weeks ago too, which asks a few questions..

1: Why didn't they go public then?

2: Why did it take them a month to find out it had happened?

 

[ford34/2]

Not even an E mail from them, I`m guessing this is not a wind up--dont watch telly.

Stan

 

[brightspark]

Not even an E mail from them, I`m guessing this is not a wind up--dont watch telly.

Stan

i just went on ebay earlier and they posted it there but i didnt bother looking

 

[wristpin]

Ebay are advising that passwords should be changed but at the moment they are overloaded and it's not possible to do so!

 

[gordon stephenson]

Just changed mine, went through straight away.

 

[wristpin]

Just had another go and it's gone through OK

 

[Windy Miller]

Oh no!!!

Someone's hacked my account and bought a massive lathe and a new welder!

Well that's what I told the wife anyhow!

 

[rich r]

It would appear they weren't 'hacked' as such - the 'hackers' managed to trick a couple of eBay employees to reveal their usernames and passwords and then they just logged on with them. Sometimes it's a lot easier to get information out of people than it is out of computers. That was known at the end of February. But it's taken a couple of weeks to find out what was accessed by these people, because it's not easy to tell what's normal usage by employees and what's being accessed by people using employees username and passwords who aren't those actual employees.

It looks like the database they took a copy of contains names and addresses and encrypted passwords, but nothing financial. Paypal is totally separate. So at worst they know your ebay username and where you live. The first they could probably work out from eBay feedback ratings, the second they could get from the any number of places (phone book, Facebook, etc). So it's not a massive security issue really.

(and yes, my day job is related to computer network security)

 

[the snooper]

a k

Oh no!!!

Someone's hacked my account and bought a massive lathe and a new welder!

Well that's what I told the wife anyhow!

and kindly sent them to you a honest hacker

 

[ford34/2]

Changed in a matter of Minutes, still disappointing that E Bay with its sophisticated system cant generate an E mail warning members to consider changing their password, Maybe the risk of Hacking is very low,or non existant and the press just love jumping on the band wagon of doom and gloom.
Stan

 

[johnakay]

changed mine with no problems.

 

[Wendelspanswick]

changed mine with no problems.

What did you change it to?

 

[BrokenBiker]

i have just had 2 emails from paypal, both sent today. the first is claiming that a payment was declined by my bank on 18th may, and the second is claiming the same payment was declined today. the item number refers to the seat post i bought on the 18th, but that has arrived, and my bank hasn't declined anything.

have reported it through paypals website, didn't open any of the links in the emails

 

[johnakay]

What did you change it to?

two fingers

 

[kier]

changed mine , just cant remember it

 

[zzr1200]

Oh no!!!

Someone's hacked my account and bought a massive lathe and a new welder!

Well that's what I told the wife anyhow!

Best you contact Ebay and start a payment dispute, now then.........

Oh and change your password while your there...

 

[CRB]

4 hours and still waiting for my reset email.

I cannot log in without it.