145 Million eBay Users Are Compromised In Cyber Attack

145 Million eBay users are compromised in Cyber attack. Yesterday hackers attacked on eBay website and stole 145 million user accounts. eBay users notified by email to change the customers password. Its an online auction and shopping website in which people and businesses buy and sell a broad variety of goods and services worldwide, was founded in 1995 now its became world largest e-commerce website.

eBay also officially post in its blog
"eBay users to change their passwords because of a cyber attack that compromised a database containing encrypted passwords and other non-financial data. After conducting extensive tests on its networks, the company said it has no evidence of the compromise resulting in unauthorized activity for eBay users, and no evidence of any unauthorized access to financial or credit card information, which is stored separately in encrypted formats. However, changing passwords is a best practice and will help enhance security for eBay users.Information security and customer data protection are of paramount importance to eBay Inc., and eBay regrets any inconvenience or concern that this password reset may cause our customers. 

We know our customers trust us with their information, and we take seriously our commitment to maintaining a safe, secure and trusted global marketplace.

"The database, which was compromised between late February and early March, included eBay customers’ name, encrypted password, email address, physical address, phone number and date of birth. However, the database did not contain financial information or other confidential personal information. The company said that the compromised employee log-in credentials were first detected about two weeks ago. Extensive forensics subsequently identified the compromised eBay database, resulting in the company’s announcement today. "

EBay spokeswoman Amanda Miller told Reuters, on Wednesday that those passwords were encrypted and that the company had no reason to believe the hackers had broken the code that scrambled them.

"There is no evidence of impact on any eBay customers," Miller said. "We don't know that they decrypted the passwords because it would not be easy to do."

She said the hackers gained access to 145 million records of which they copied "a large part". She also said that company hired FireEye Inc Mandiant forensics division to help in the investigation.

eBay already running bug bounty Program for security researchers . Also company gives acknowledgement and giving thanks to security researchers who already submitted security disclosure in eBay website.

But here is the biggest question arise on that, who is behind in this attack? 
Is eBay still insecure?  

eBay should have to be give answers on these questions. 

Share this article Link with your friends

Follow iGadgetware on Facebook TwitterGoogle+

No comments

Note: only a member of this blog may post a comment.