Ebay Breach Puts 145 Million Records at Risk

Over the last week, information continues to come to light concerning a massive Ebay breach. Last Wednesday, ebay posted a announcement on their corporate blogging recommending customers change passwords due to a database compromise (Ebay Inc. To Ask Users to Change Passwords). In the process of alerting officials and customers, ebay has made several stumbles, and now customer inquires are translating into government investigations of ebay.

According to ebay, the database compromise happened in late February or early March. The ebay breach “included eBay customers’ name, encrypted password, email address, physical address, phone number and date of birth.”

Wired magazine has suggested that ebay’s attempt to contact customers has been and confused and demonstrates exactly how not to respond to a data breach. Wired talked with Dave Kennedy, the CEO of security consultancy and breach response firm TrustedSec. “It just seems like their response has been complete disarray and disorganization,” says Kennedy. “This is one of the worst responses I’ve seen in the past ten years from a company that’s experienced a breach.”

Brian Krebs reports that an advertisement has emerged that appears to be selling the leaked ebay list (see KrebsonSecurity). Krebs suggests that it is possible the ad is simply a scam. Similar scams appeared after a LinkedIn breach. Researchers are currently working to confirm.

If you have an ebay account and have not received notification from ebay, it is still recommended that you change your ebay password. Also, if you have duplicated that ebay password on any other account, you should immediately change those passwords as well. This is always a good reminder to avoiding duplicating passwords between accounts and to consider using a password reminder service.

The post Ebay Breach Puts 145 Million Records at Risk appeared first on Integracon Technologies Blog – Computer Support in Knoxville, TN.