Auction site says incident is a hack, not a leak
Users who went to eBay's "Trust & Safety" fraud prevention forum yesterday got a little surprise: Someone had posted the names, addresses, and credit card information of some 1,200 current subscribers on the site.
No, it wasn't an accidental leak from eBay's customer database, according to a report. The information was posted by a hacker who apparently stole the data in a phishing attack.
The attacker, who prefaced a number of postings with "Wheeeeeeeeeeee," posted legitimate names and addresses of eBay users via a script that published about 15 names a minute. However, eBay says it has checked the posted credit card data against its records for each of the users, and it turned out to be fake. The auction site is notifying each of the individuals, so that they can check to see if any of the data is valid.
EBay has temporarily blocked community postings to the Trust & Safety forum and posted a warning to all members.
— Tim Wilson, Site Editor, Dark Reading
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024