Security Bytes

Sep 26 2007   11:42AM GMT

eBay hacked, user data compromised

Leigha Leigha Cardwell Profile: Leigha

eBay is getting a lot of unwanted attention today, after someone managed to post personal contact information and credit card numbers for about 1,200 eBay users on the eBay.com Trust & Saftey forums.

eBay has yanked the Trust & Safety forums offline, but the trouble doesn’t end there. According to published reports, someone recorded a video of the hacked forums and put it on Youtube.com. (Update: The video was recently removed for a terms of use violation.)

eBay posted this message on the eBay Chatter blog in response:

“Very early this morning, a malicious fraudster posted on the Trust & Safety forum on eBay.com posing as approximately 1,200 eBay users. The fraudster made these posts in a way that was intended to appear as though he logged in with their accounts. The posts contained name and contact information, which appears to be valid, and could have been secured as part of an account take over.

“The posts ALSO appeared to contain credit card information — however, these credit cards are not associated with financial information on file for these users at eBay or PayPal. We’re in the process of reaching out by phone to these members to, so that if the information is valid somehow — regardless how this fraudster acquired the information — these members can take the steps they need to take to protect themselves.

“eBay and our forums vendor, LiveWorld, began taking steps to remedy the situation within an hour after it started. As things evolved behind the scenes, a decision was made to make the the Trust & Safety forum unavailable to our Community. It’s still temporarily inaccessible, as the teams work on this issue.”

1  Comment on this Post

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Leigha
    With the large number of bogus emails I receive which claim to be from eBay or from an eBay buyer which try to get me to sign on to ebay through a bogus URL, I if this information was obtained by people who were duped.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to: