MSE News: eBay cyber-attack: Change your passwords, auction site warns users

Pincher

Changed my password on 21st May by simply logging in.
Logged in just now, got a message, and a button to change my password if I want to. No compulsory anything.

soolin

Pincher wrote: »

Changed my password on 21st May by simply logging in.
Logged in just now, got a message, and a button to change my password if I want to. No compulsory anything.

I've got that on all my accounts now even though I've changed the passwords already.

Cornucopia

My main ebay account is now locked out, because it goes directly to the Change Password dialog after login, and I don't have access any longer to any of the confirmation routes.

It's locked, even though I have auctions running. What a disaster for eBay's reputation.

I've just gone through the mandatory password reset on my second account.

soolin

Cornucopia wrote: »

My main ebay account is now locked out, because it goes directly to the Change Password dialog after login, and I don't have access any longer to any of the confirmation routes.

It's locked, even though I have auctions running. What a disaster for eBay's reputation.

I've just gone through the mandatory password reset on my second account.

Exactly what happened with my main buying account- you will need to phone eBay. My tip is to go through another of your accounts so you get a pin and get straight through.

For a while I was panicking, I could not see how on earth to regain my account if I had no access to the associated email address.

Cornucopia

I tried using the online chat, which wasn't very helpful.

I have the number for the security team, who will hopefully sort it out.

I should point out that I have put new contact info into my profile, but it doesn't show when I try to do the password confirmation (I get only old info).

Cornucopia

soolin wrote: »

you will need to phone eBay.

Any recommendations for time of day to do this? I phoned this morning, and was greeted by 183 minute estimated wait time.

soolin

Cornucopia wrote: »

Any recommendations for time of day to do this? I phoned this morning, and was greeted by 183 minute estimated wait time.

early or late and if you have another live account go through that to get a PIN.

VictimOfImpersonation

I have two accounts and managed only to change one the other day.

On that one despite two tries, I never received the promised email after selecting the option to have the unique user change password link emailed to my account email address which was a valid one.

It had worked on my main account but not on my little used second account.

Today I tried again and I see they have a new option 3 which is to have them call you with a PIN rather than you call them.

Naturally if your ebay account has no valid telephone number then that's your lookout and the fact raises some interesting other questions, but after getting an error message on the first try after receiving an immediate automated call, the second attempt succeeded.

I just got a friend to change theirs too - same way - works well.

All done today and very fast too.

I am sure both ebay, some customers, and the authorities (have we really got any we can pin down on these types of problems!?) have learned many lessons.

Cornucopia

soolin wrote: »

early or late and if you have another live account go through that to get a PIN.

Thanks - just been on and got it sorted out.

What a painful process, though - providing long email addresses over the phone to someone in the US, where they don't even have the same phonetic alphabet.

soolin

Cornucopia wrote: »

Thanks - just been on and got it sorted out.

What a painful process, though - providing long email addresses over the phone to someone in the US, where they don't even have the same phonetic alphabet.

I've never got through to any cs dept in the US, only Dublin. Perhaps they have drafted in help from all over for this fiasco.