EBay today is asking all users to change their passwords due to a cyberattack that has compromised key data. However, according to eBay, financial information, as well as its mobile payment subsidiary Paypal, remain safe.
The fear is that PayPal was compromised in the attack. However, eBay maintained that there is “no evidence of unauthorized access or compromises to personal or financial information for PayPal users.” An eBay press release noted that PayPal data is stored on a different network than eBay. Additionally, PayPal financial data is encrypted. EBay did not indicate whether eBay data is encrypted, too.
EBay wrote that the cyberattack took place between February and early March. Hackers obtained access to eBay customers’ names, encrypted passwords, email addresses, physical addresses, phone numbers and dates of birth. The compromised database did not contain any financial data, however, and that information remains secure, according to the company.
EBay responded to a Bank Innovation request for more information with the following statement:
Our customers are our highest priority; and to ensure they continue to have a safe, secure and trusted experience on eBay, later today, eBay will be asking all eBay users to change their passwords. Extensive forensic research has shown no evidence of unauthorized access or compromise to personal or financial information for PayPal customers. PayPal customer and financial data is encrypted and stored separately, and PayPal never shares financial information with merchants, including eBay.
Interestingly, it was revealed last week that DDoS hackers have been using PayPal as a method of payment for their “services,” which netted up to $35,000 worth of PayPal payments. According to security blogger Brian Krebs, DDoS attackers have been advertising their services on forums and asking for payments via PayPal. PayPal said, in a statement to Krebs, that it rigorously checks for malicious activity and works with law enforcement officials to report any criminal activity.
EBay has a global customer base of 233 million and 145 million active buyers.