EBay has been hacked?

[nitestar41]

Hopefully EBay will contact everyone this effects... I was asked to post this over here...

http://forums.ebay.com/db2/thread.jspa?threadID=2000439492&tstart=0&mod=1190726767945

The T&S board has been closed down but it took EBay over an hour (I think) to do anything about it, There were CC numbers as well as the 3 digit security codes being posted.

ALSO be careful with PayPal... someone mentioned they've been acting strange today too, Error messages, having to sign in again, etc.

[Reno.Muse]

1. I've been wondering when this was going to happen ...

wonder why it took the hackers so long?

[distantearlywarning]

2. Great. Just what I needed this morning.

Thanks a bunch for the heads up!

[eleny]

3. I posted the url for your thread to the Ebay forum here at DU

http://www.democraticunderground.com/discuss/duboard.php?az=show_topics&forum=403

Maybe someone there has some more info to share. Jeez, this is awful.

[WinkyDink]

4. Who has credit card numbers on e-Bay? I pay by PayPal, and even that isn't linked to a CC.

[eleny]

11. Sellers do

[lpbk2713]

5. I bought something two days ago on Ebay and thought something was odd.

I used PayPal and after I was was done I noticed there was no "Sign Off" box for me to click anywhere on the screen. I've been watching my account closely ever since and so far so good.

[SoCalDem]

9. Call your CC company.. ASAP.. alert them to the possibility

:scared:

[lpbk2713]

16. Thanks for the heads up.

I just checked my PayPal account and my credit card account and everything looks OK. I'll continue to check both often.


:thumbsup: :hi: :thumbsup:

[Arkansas Granny]

6. I just checked my PayPal account. Everything looks OK.

[PA Democrat]

7. I got what looked like a phishing email from someone claiming to be PayPal.

When I tried to log directly into PayPal rather than using the link in the email, PayPal came up with no data, just a blank page. It was hours later before I was able to get in to verify that nothing had been posted to my account.

[grasswire]

8. never click on any of those links in email

Phishing is extremely common. Just ignore those emails.

[PA Democrat]

13. I know, I never do.

[October]

10. I've had problems!

Someone hacked into my PayPal account, and was making withdrawals from my checking account! It was a nightmare! The criminal supposedly had only the last four digits of my checking account number and that was somehow enough for them to do this! (According to the person I spoke with at PayPal.) If they'd had my debit card (which accesses the same checking account), it would've been easier to stop the whole thing -- but because they were making wire transfers directly from my checking account, it couldn't be stopped quickly. I sat there and literally watched this happening.

First, $371, then...$600. I saw the transactions in PayPal. I was suspicious when I got an email from PayPal. I'm not new to the idea of Phishing, so I ignored the first one. Then, the 2nd one came in and I thought I'd better check my account. Sure enough, the transaction was in process!

I contacted PayPal first. They placed a hold on my account. Then, I called my bank (panic-stricken) and they were so blase. I told them someone was trying to withdrawal the funds via wire transfer. I gave them the EXACT dollar amounts and told them these were unauthorized transactions. They told me they didn't see any transactions. They said there was nothing they could do until the withdrawal happened and then I could file the necessary report.

Mind you, this could have all been much worse. I only knew of it because I checked my PayPal account online. What if I'd been out of town? The money was wired out of my account, and there was no security in place to stop it. I called my bank on their recent "fraud" ads, saying they spent tens of thousands advertising how they protect us, and now they won't do anything. They actually defended the ad...but that's another story.

PayPal put a hold on my account, and sad the money might come out of my bank account, but I should not worry because it would not leave my PayPal account. OK. I felt somewhat assured/safe. THEN, a few days later, sure enough the money came out of my bank account. This was done over a Friday-Monday period. I called PayPal. They told me again not to worry -- the money would NOT leave my PayPal account. It had all been blocked. Then, they told me there was no way they could put the money directly back into my bank account right away because it was a WIRE transfer (not debit card transaction), so it would have to go through the Federal clearing system, which would take days. Business days. I was supposed to wait 3-5 business days to get my money back. Money that PayPal allowed someone access to. Nearly $1,000! I trusted them and my bank and both let me down.

If I had not checked the account myself, there would have been no block placed on PayPal, and the bank would've let them take my money.

My husband and I went to the bank in person. The woman there contacted someone at the Federal clearing system and we swore/signed an affidavit that the transactions (in Algiers) were not authorized. They put the money immediately back into our account. I was dumbfounded. I think we just got lucky with whoever our bank rep. spoke to at the clearing system.

Everyone wanted to hold onto our money for a few days, letting it clear, etc. We were supposed to just WAIT.

It's not secure at PayPal. It's just not. They try -- but it's not possible to protect us -- not with today's technology.

[The Backlash Cometh]

17. Sounds like you have a "verified" account with paypal.

I wouldn't give them my banking info for this reason.

[October]

21. Good idea!

I'm changing my account now! When I first signed up (years ago!), I didn't realize what "verified" meant.

[bpeale]

12. my paypal account is just fine & paypal is acting normally

sounds like bullshit to me. ebay is acting fine as well.

[Virginian]

14. Update link here -- Ebay has been hacked

http://www.auctionbytes.com/cab/abn/y07/m09/i25/s00

eBay shut down an entire discussion board devoted to Trust & Safety issues after someone began posting confidential user information. Someone using multiple User IDs began listing information purported to be eBay users' private and financial data on the Trust & Safety discussion board. Mark, a user who says he posts regularly on the board, said he noticed the problem at 8:50 am Eastern on Tuesday and called his eBay representative about 20 minutes later after he saw the posts remained. He said it took about an hour for the posts to be removed, and minutes later, the entire board was taken down...

[OhioChick]

15. Nice......

K&R
:kick:

[Control-Z]

18. Does anyone know if only recent

transactions/accounts are involved? I haven't used EBay or my Paypal account for a few months.

[October]

22. For me

I'd used my PayPal once in the last year. I was stunned that it had been hacked into. As posted above, I don't recommend "verified" user status.

[nitestar41]

19. possiblly compromised user lists

I do not know if these are completed lists but...


http://shantique.com/EbayHackList92507.html

also...

http://shenemanfamily.com/comp.html

I also don't know if they are identical

[lpbk2713]

20. Thanks

I didn't see mine or that of anyone I know.

[Javaman]

23. ebay sucks.

I have tried to sell several things on there and each and every time some bogus moron with a fake account bids like 5 billion dollars, locks out the real bidders then vanishes. what is the frigging point in that other than being a total dick?

after several complains back and forth to ebay, they refused to refund my money for my ads.

I had copies of all the emails etc. it did no good. so screw them.

Craig's list for me.

[ecstatic]

24. I only use Paypal when purchasing on ebay... should I be worried? nt

[nitestar41]

25. EBay "Spin"

eBay is spinning this and making it seem like it was nothing... as far as I'm concerned no matter what... hacked or not real CC info or fake they should have taken instant steps to remedy this and not 90 minutes to shut it down...

http://www.ebaychatter.com/the_chatter/2007/09/trust-safety-fo.html

Now they are saying they took steps w/ in an hour? How the hell is 90 minutes w/in an hour? Last I checked an hour was only 60 minutes.

eBay is trying to sweep this under the rug and eBay users should not allow them to...

I think the users who need to be concerned the most are the ones that have their CC info on eBay... PayPal was acting up earlier, I heard, but it could have just been a flook I have not located anything that implies it's something to be concerned with (as far as PayPal goes anyway)...

Oh and here is Auction Byte writer Ina Steiner's Auction Bytes Blog about this

http://blog.auctionbytes.com/cgi-bin/blog/blog.pl?/pl/2007/9/1190743667.html

[nitestar41]

27. sorry tandem posting,,,

Someone calling themmself Vladuz posted a comment in this YouTube video.

ebaY Major Hack AttacK! User's Data Posted On Ebay T&S Bd

http://www.youtube.com/watch?v=_q9m2iFsz9M


Trust and Security is back up... This is the thread regarding this on that forum...

http://forums.ebay.com/db2/thread.jspa?threadID=2000440268&tstart=0&mod=1190749231292

[AZBlue]

26. Screen shots are now on You Tube!

http://www.youtube.com/watch?v=_q9m2iFsz9M