News : Ebay database hacked

[adamtemp64]

http://www.bbc.co.uk/news/technology-27503290 advised to change passwords on ebay

[Cleoriff]

Hi @Anonymous I do agree there would need to be many checks by Ebay on the information databases that had been hacked.

It was slightly galling this morning, however, when listening to our Information Commissioner Christopher Graham on BBC News, explaining the problems we will incur before we even mount an investigation 

Apparently the  USA have already got the FBI involved, whilst here in the UK, we have yet to start any investigation whatsoever!  This is due to the fact that Ebay (in Europe) is based in Luxembourg...and we have to work with other European Data Protection services 'to decide the way forward'

He was quite open about the fact that in the USA the Federal Trade Commission have considerable powers whilst here in Europe it is taking so long to modernise the Data Protection Directive that the rules aren't as clear as they should be.....

[Anonymous]

Hi @Cleoriff

A case of too much Red Tape and not nearly enough action. 😞

[Cleoriff]

---

@Anonymous wrote:
Hi @Cleoriff

A case of too much Red Tape and not nearly enough action. 😞

---

@Anonymous  I think that is what Christopher Graham was inferring. He was actually quite guarded with his responses.

He didn't fill me with confidence.

One of his comments was to the effect that 'we' have to find out who knew what and when (in relation to this delay of customers being informed)

(It just seems such a farce that USA have the power to bring in the FBI and have done so...while we dither about in the wings fluttering about aimlessly!)

[Anonymous]

I agree.

I've just read this BBC news link http://m.bbc.co.uk/news/technology-27517907

Hmmmm.

[Anonymous]

Email received this evening from EBay:


IMPORTANT: PASSWORD UPDATE


Dear eBay Member,


To help ensure customers' trust and security on eBay, I am asking all eBay users to change their passwords.


Here's why: Recently, our company discovered a cyberattack on our corporate information network. This attack compromised a database containing eBay user passwords.


What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.


What I ask of you:
Go to eBay and change your password. Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place.


If you have only visited eBay as a guest user, we do not have a password on file.


If you used the same eBay password on any other site, I encourage you to change your password on those sites too. And if you are a PayPal user, we have no evidence that this attack affected your PayPal account or any PayPal financial information, which is encrypted and stored on a separate secure network.


Here are other steps we are taking:
As always, we have strong protections in place for both buyers and sellers in the event of any unauthorized activity on your account.
We are applying additional security to protect our customers.
We are working with law enforcement and leading security experts to aggressively investigate the matter.

Here's what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth.


However, the file did not contain financial information. And, after conducting extensive testing and analysis of our systems, we have no evidence that any customer financial or credit card information was involved. We also have no indication of a significant spike in fraudulent activity on our site.


We apologize for any inconvenience or concern that this situation may cause you. As a global marketplace, nothing is more important to eBay than the security and trust of our customers. We know our customers have high expectations of us, and we are committed to ensuring a safe and secure online experience for you on any connected device.


Devin Wenig Signature
Devin Wenig
President, eBay Marketplaces

[Anonymous]

A bit like locking the stable door after the horse has bolted @Anonymous with the e mail being sent out.

Last I read was an investigation is being carried out and rightly so. 😞

http://www.bbc.co.uk/news/technology-27539799

[MI5]

I now have 2 different, working eBay passwords.... methinks they have screwed up !!!

[Cleoriff]

I too have received this email tonight!

(A bit much when I changed my password as soon as BBC broke the news)

If nothing else, my faith in Ebay communication systems is now non-existent

[Anonymous]

EBay havea lot of explaining to do. I hear the US and UK data protection people are taking a look.

All well and good but if people have their identity stolen will EBay compensate / sort it out for you? Bet they won't. ....