eBay asks users to change passwords after cyberattack
NEW YORK - eBay Inc., operator of the online-auction site, Wednesday asked users to change their passwords after a cyberattack exposed a database with login information and data such as birthdays and phone numbers.
NEW YORK - eBay Inc., operator of the online-auction site, Wednesday asked users to change their passwords after a cyberattack exposed a database with login information and data such as birthdays and phone numbers.
There's no evidence of unauthorized activity resulting from the breach, eBay said in a statement. While credit-card numbers are stored separately and encrypted, it's still best to change passwords, the company said.
The revelations from eBay come on the heels of an Internet security bug known as Heartbleed, which was made public April 7, and follows high-profile consumer-data breaches at Target Corp. and Neiman Marcus Group Ltd. In this case, hackers reached eBay's corporate network by getting access to a small number of employee passwords, prompting the company to disclose the attack.
"Cybersecurity and cyberattacks have really become as much a part of day-to-day life as folks using the Internet and mobile offerings," said Scott Kessler, an analyst at S&P Capital IQ in New York. "This seems like mostly a precaution but a precaution that companies find themselves increasingly looking to communicate about."
eBay's disclosure stands in contrast to the actions of three U.S. public companies recently identified as Chinese hacking victims. The companies, including Alcoa Inc. and Allegheny Technologies Inc., did not report the theft of trade secrets and other data to investors, according to a Justice Department indictment unsealed May 19.
eBay said it was working with police and security experts to investigate the breach, which occurred between late February and early March. The database that was compromised contained encrypted passwords and personal information on users, though not financial data related to its PayPal customers, the company said.
"PayPal data is stored separately on a secure network, and all PayPal financial information is encrypted," eBay said.
eBay is asking users to change their passwords on its own service and on any other site where that password is used.