MSE News: eBay cyber-attack: Change your passwords, auction site warns users

RFW

pennypincher2013 wrote: »

I've changed my password and my email address in both ebay accounts. I'm not happy about this I found when changing personal details: Last change to registration or feedback: 08-Apr-14 15:20:41 BST

And in my 2nd ebay account found this: Last change to registration or feedback: 02-Apr-14 13:36:47 BST

I know that was not me as I was away at those times and never used the internet. No, I don't use the internet that often

If those updates weren't by you you probably wouldn't have been able to change the password. have any other of your details changed on your accounts?

SevenOfNine

I just attempted to change my password, this message popped up telling me Ebay had sent an email to e****e@etc etc. However, the first part of that email address bears NO resemblance to mine and no request link has arrived in MY email box!

Went on to on-line chat to find out what might have happened and waited my way to the top of the queue. 'Josephine' comes along to say she's sorry. Then she'll do her best to help. Then clarifies I'm logged on. I ask who's email address they've sent my password change link to and I get......chat ended!

Gone back in to Ebay and requested password change again, Ebay confirmed an email had been sent to MY address (this time), nipped in and changed it and will double check tomorrow, and again after 24 hours that it hasn't been changed again by whoever owns email address e***e@

Jeez, can't even trust Ebay to send emails to the correct person.

PS Just did another on-line chat, operative a bit more useful, though suggestion that I changing my email address on Ebay should prevent a problem. Er, change it to what exactly? Doesn't know HOW Ebay managed to send a link to my a/c to an email address completely unconnected to my a/c. Kept the on-line chat's so at least if my a/c is accessed fraudulently I'll be able to show that's because they sent a link to it to a stranger.

Consumer_helper

To confirm what and how ebay store personal data, it is always wise to make a DPA 1998 section 7 request. By law their data controller has to reply within 40 days. This should concentrate their efforts.

Jon_01

Consumer_helper wrote: »

To confirm what and how ebay store personal data, it is always wise to make a DPA 1998 section 7 request. By law their data controller has to reply within 40 days. This should concentrate their efforts.

And we all know how much Ebay complies with the law...

luvvlyjubbly

I'm still waiting for an email to change my password, been over 8 hours now....ridiculous

kurgon

And yet, when you do get an info message, it contains the one thing that eBay say they will never do....write to you as eBay user!!!




IMPORTANT: PASSWORD UPDATE




Dear eBay Member,




To help ensure customers' trust and security on eBay, I am asking all eBay users to change their passwords.




Here's why: Recently, our company discovered a cyberattack on our corporate information network. This attack compromised a database containing eBay user passwords.




What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.

forgotmyname

Yes ebay member as the title. But at the bottom of the email will be your real name.

But saying that every person i have sold to or bought from know that.

pennypincher2013

RFW wrote: »

If those updates weren't by you you probably wouldn't have been able to change the password. have any other of your details changed on your accounts?

I have changed the password and email address on both my ebay account. I can't see any changes in my accounts but they are worrying. At the time the supposed changes were taking place, I was busy getting lost on the way to my hotel. lol!

kalsha

I changed my password 3 days ago and just now I got an email from "ebay" addressed to "ebay member" asking me to change my password.
Is there a need to change the email address? Doesn't that mean that I have to set up a new email address? If I change the one I currently use which I use for social contacts as well, it would mean notifying everyone and could get complicated. When I started selling on ebay, I did not set up a email address just for that purpose as I thought I would only sell a couple of things and give up.

soolin

kalsha wrote: »

I changed my password 3 days ago and just now I got an email from "ebay" addressed to "ebay member" asking me to change my password.
Is there a need to change the email address? Doesn't that mean that I have to set up a new email address? If I change the one I currently use which I use for social contacts as well, it would mean notifying everyone and could get complicated. When I started selling on ebay, I did not set up a email address just for that purpose as I thought I would only sell a couple of things and give up.

I see no reason to change an email address.