eBay urges users to change passwords

dogmaryxx

http://www.bbc.co.uk/news/

bod1467

Might be better to link the actual article rather than BBC's news home page.

http://www.bbc.com/news/technology-27503290

Bollotom

Might be a good idea to do it today then again tomorrow. I think Facebook had a similar problem but the advice was not to do it immediately as there was a suspicion that 'Lurkers' were waiting to intercept the new info. As an aside I change my password on a monthly basis and have different passwords for each account that requires one. :cool:

Ant555

It says the passwords were encrypted.

If they used a decent algorithm then I would think its going to be quite hard to crack the encryption on the passwords. As long as they didn't use the same technique that Adobe employed before they were hacked then we all might be safe for a while.

This bit (below) opens up a new can of worms though...

It said it would be contacting users to alert them of the issue via email, its website, adverts and social media.

I would imagine the number of spoof emails and links on social media to phishing sites that look just like ebay asking you to enter your name and password is just about to ramp up.


PS - I'm not saying that changing the password is not a good idea though because it is.
If anyone here uses the same email/password combination for eBay on any other sites then try to think of them all asap and make time to change them as well.

trollopscarletwoman

I've just heard an 'expert' suggesting the the hackers didn't hack the main site but hacked the account of privileged users if that makes any sense for those that know.

The commentator also suggests that although you can change the username and password for ebay the crims still have your name, address, email address, dob, possibly phone number (mines on there) and this info remains valid and could be used for ID fraud.

Its his suspicion that is why this has been done-not to use the accounts themselves but to sell the info.

If that's correct then this could be massive.

googler

What's a 'privileged user'?

Which sectors of eBay are affected? ebay.com? ebay.co.uk?

Does anyone know if they have different databases for different countries, and if it's only one country (USA, hence .com) that's been hacked?

trollopscarletwoman

googler wrote: »

What's a 'privileged user'?

Which sectors of eBay are affected? ebay.com? ebay.co.uk?

Does anyone know if they have different databases for different countries, and if it's only one country (USA, hence .com) that's been hacked?

No idea what a privileged user is but it suggests that they have access to where users personal info is kept.

Lets hope its all been blown out of proportion.

Terry98

Looks like their advertisement network has been compromised.....
http://forum.avast.com/index.php?topic=150485.0

pennypincher2013

I haven't changed my password yet. Im concerned that if I do the hackers will have my new password and anything else I may change to try to protect myself. Then again, they already have access to my personal data, maybe changing the password ASAP is best. But even if the hackers have ebay users personal data, they could sell that information on regardless of a password change. I cant change my address unless I move house which Im not going to do.
I use same email addy for paypal. Should I change this?
Very disappointed with ebays security.

Crinkmeister

You need to move house, change your name, sex, sell your car, dye your hair, change all your bank accounts then it will be ok.

Seriously, it's a flaming nuisance having to keep changing the 8 billion passwords I have!!

Sorry. Taking a deeeep breath.....Better now!

pennypincher2013

Crinkmeister wrote: »

You need to move house, change your name, sex, sell your car, dye your hair, change all your bank accounts then it will be ok.

Seriously, it's a flaming nuisance having to keep changing the 8 billion passwords I have!!

Sorry. Taking a deeeep breath.....Better now!

lol! I dont own a car so thats one thing sorted.