Ebay hacked and panic ensues.
eBay released a statement yesterday, letting the public know that the internal and customer databases had been compromised earlier in 2014 and they are now urging users to change their passwords. Heartbleed? Something else? Who knows? What we do know is that it is the 2nd largest hack in US history.
And another one bites the dust.
What Did They Get?
The attackers responsible for the breach were able to take off with names, addresses, email addresses, phone numbers, birthdays and encrypted passwords. At this point, eBay assures us that financial information like bank accounts and PayPal had not been compromised. Oh, and they don’t think anyone’s passwords had been used yet. (“Yet” makes me feel super secure.)
How it Happened
The hackers started by gaining employee information first and then used employee passwords in order to access the information that they were really after. The breach was discovered around two weeks ago, but the actual breach happened in late February to early March. No word on why it took so long to inform the rest of us.
What to Do
In order to change your eBay password you will need to first log into your eBay account, click on your name in the upper left corner and choose account settings. From there you will need to click on ‘personal information’ to the left of the page and click “edit” net to your password.
If you like so many others use the same password across multiple websites, you will need to change those passwords as well and it is advisable to use a different password for every site you use. You can use a password manager that will generate strong passwords in order to protect yourself better. See our guide to passwords HERE and other useful information HERE.
Are you worried?