Ebay hacked, passwords at risk !

[g8ina]

http://www.bbc.co.uk/news/technology-27503290

[Rob_B]

Been hearing about it all day, but I'm not worried, they can't get into my eBay account, they just have my name/address/dob/phone number etc - so that's fine then.....

And 2 weeks it took them to inform anyone, 2 weeks!

[kompukare]

And 2 weeks it took them to inform anyone, 2 weeks!

Inform? When I went to change my password earlier there was no notice anywhere, they haven't sent me an email and neither ebay's and paypal's site made it easy to even find the change password page.

As usual, Ebay Inc. has showed how little they care about their customers but then what else is new?

[Rob_B]

Well, inform as in the news. And I logged in to no notice but then it randomly asked me to change it :/

Did anyone ever think they cared, really?

[scaryjim]

I'm working on the assumption that since this is public but I haven't had anything direct from ebay, that it was only a limited subset of users who are affected and I'm not one of them. Not particularly reassuring though, particularly when brute-forcing encrypted passwords is no longer the preserve of research-grade HPC installations any more...

[Funkstar]

I happened to change my password last week, and as the breach took place two weeks ago, I won't need to change it again.

barely use eBay anyway.

[wasabi]

It does now recommend you change your password on a big banner on the landing page. At least for me. I changed it just in case, although it has one of those annoying send-a-reset-url-to-registered-email type reset systems.

[TooNice]

I'll probably forget my password if I change it now though. I hardly ever use Ebay anymore.

[Output]

"However, the database did not contain financial information or other confidential personal information.

Surely the paragraph immediately before that contradicts that?

"The database... included eBay customers' name, encrypted password, email address, physical address, phone number and date of birth," it said.

I'd consider most of that to be confidential personal information.