w~~_7.JPG "pjcdn2005"){kind=avatar}
eBay asks users to change password following cyberattack, no evidence of unauthorized activity
The Associated Press, at 09:48 on May 21, 2014, EDT.
SAN JOSE, Calif. - E-commerce site eBay is asking users to change their password after a cyberattack compromised a database containing encrypted passwords.
The company says there is no evidence of any unauthorized activity and there is no evidence any financial or credit card information was stolen.
eBay says its investigation is active and it can't comment on the specific number of accounts affected, but says the number could be large.
Cyber attackers stole a small number of employee log-in creditials that gave them access to eBay's corporate network. The San Jose, California-based company is working with law enforcement to investigate the attack.
The database was hacked sometime between late February and early March.
eBay owns electronic payment service PayPal, but eBay says there is no evidence PayPal information was hacked.
The saddest part of the story is that eBay has not yet made the announcement on its announcement board, nor through messages to its members.
You find the information on the financial networks!
NEW YORK (TheStreet) - E-commerce giant eBay (EBAY_) said on Wednesday cyberattackers hacked into a small number of employee log-in credentials, allowing unauthorized access to eBay's corporate network. The online marketplace urged customers to change their passwords and also noted it had yet to see a rise in fraudulent activity or any compromise of its mobile payments arm, PayPal.
eBay said databases at the company were hacked between late February and early March, and data stolen as a result of the attack included eBay customers' name, encrypted password, email address, physical address, phone number and date of birth. The hacked database, however, did not contain financial information or other confidential personal information. eBay also emphasized on Wednesday it keeps PayPal data separate from its online marketplace.
"The compromised employee log-in credentials were first detected about two weeks ago. Extensive forensics subsequently identified the compromised eBay database, resulting in the company's announcement today," eBay said.
Later on Wednesday, eBay will notify users of the cyberattack and them to change their passwords on the site.
"After conducting extensive tests on its networks, the company said it has no evidence of the compromise resulting in unauthorized activity for eBay users, and no evidence of any unauthorized access to financial or credit card information, which is stored separately in encrypted formats," eBay said.
"However, changing passwords is a best practice and will help enhance security for eBay users," the company concluded.
CEO John Donahoe did not provide comment on the press release.
Shares of eBay were falling nearly 2% in early Thursday trading, trading at $51 a share.
UPDATE (10 am EST): PayPal spokesperson Jennifer Hakes told EcommerceBytes eBay will only be asking its user base later today to change passwords. "Extensive forensic research has shown no evidence of unauthorized access or compromise to personal or financial information for PayPal customers," she said.
"PayPal customer and financial data is encrypted and stored separately, and PayPal never shares financial information with merchants, including eBay. PayPal account holders should consider changing their passwords only if their credentials are the same as those they use for eBay."
Pierre mentioned the report said that the attack(s) occurred in late February and March. Hopefully changing passwords now isn't just a pointless horse-and-barn-door scenario.
It would have been so much better and more effective to have known about this as soon as eBay knew it was happening. 
Reports have stated that the intruders have no access to member ID information.
Polio is making a comeback because of non-vaccination beliefs.
Perspective.
Polio is making a comeback because of non-vaccination beliefs.
Perspective.
Go to the Customer Support link (top of the page) and enter "change password" in the box.
eBay will then direct you to: http://pages.ebay.ca/help/account/change-password.html
If you read the reports, personal IDs have no chance of being accessed by this "hack".
Now that the "news" is out, eBay has to resort to the change your password mantra which you are supposed to do every six months anyway.
If this is news, toe fungus is news.
According to the official post by eBay Inc on eBay.com:
What customer information was accessed?
The attack resulted in unauthorized access to a database of eBay users that included:
· Customer name
· Encrypted password
· Email address
· Physical address
· Phone number
· Date of birth
What I rad was that the accessed employee ID info "could" lead to those things. Could, not would, not did.
Featured Posts
