eBay Compromised 193
New submitter bobsta22 (583801) writes "eBay has suffered a security compromise requiring them to have all users change their passwords. As yet only a press release. Lets hope there's more juice on this."
From the press release: "Cyberattackers compromised a small number of employee log-in credentials, allowing unauthorized access to eBay's corporate network, the company said. ... The database, which was compromised between late February and early March, included eBay customers’ name, encrypted password, email address, physical address, phone number and date of birth. However, the database did not contain financial information or other confidential personal information. The company said that the compromised employee log-in credentials were first detected about two weeks ago."
Re:link? (Score:5, Informative)
Slashdot, now with less actual news and information, but nearly 100% sensational!
I understand reading is hard so I highlighted the important parts for you.
eBay Inc. (Nasdaq: EBAY) said beginning later today it will be asking eBay users to change their passwords because of a cyberattack that compromised a database containing encrypted passwords and other non-financial data.
Correction: Password length NOT shown (Score:5, Informative)
I was wrong. They are always showing eight asterisks. It's not the length of your password unless your password is eight characters.
Wait - what?! (Score:5, Informative)
The hackers gained access to " name, [...], physical address, phone number and date of birth"
But they "did not [access] other confidential personal information"
What other personal information is there on the planet? Your name, address and DOB is pretty much everything needed for identify theft.
Okay - I guess they didn't get Health records. Seriously though - what "other confidential information" does eBay store?
Re:Since February and just now hearing about it?! (Score:4, Informative)
That's a dangerous game. There's a legal precedent that they could be fined as much as one hundred thousand pounds in UK court for data protection breaches. It could take them days to find that much money in the sofa.