TribLIVE

| Business


 
Larger text Larger text Smaller text Smaller text | Order Photo Reprints

EBay hit by cyberattack, warns users to change passwords

Email Newsletters

Click here to sign up for one of our email newsletters.

On the Grid

From the shale fields to the cooling towers, Trib Total Media covers the energy industry in Western Pennsylvania and beyond. For the latest news and views on gas, coal, electricity and more, check out On the Grid today.

By Bloomberg News
Thursday, May 22, 2014, 12:01 a.m.
 

EBay Inc., operator of the online auction site, asked users to change their passwords, because a cyber-attack exposed a database with login information and data such as birthdays and phone numbers.

There's no evidence of unauthorized activity resulting from the breach, eBay said in a statement on Wednesday. While credit-card numbers are stored separately and encrypted, it's still best to change passwords, the company said.

In recent months, Target Corp. and Neiman Marcus Group Ltd. reported high-profile consumer-data breaches, and a web-security bug known as Heartbleed was made public. In this case, hackers reached eBay's corporate network by getting access to a small number of employee passwords, prompting the company to disclose the attack.

“Cybersecurity and cyber-attacks have really become as much a part of day-to-day life as folks using the Internet and mobile offerings,” said Scott Kessler, an analyst at S&P Capital IQ in New York. “This seems like mostly a precaution, but a precaution that companies find themselves increasingly looking to communicate about.”

EBay, based in San Jose, Calif., is asking users to change their passwords on its service and on any other site where that password is used. Activity on eBay's website has been normal since the breach was revealed on Wednesday, showing no impact from the announcement, according to a person with knowledge of the matter. Kari Ramirez, a spokeswoman for eBay, declined to comment.

EBay said it's working with police and security experts to investigate the breach, which occurred between late February and early March. The database that was compromised contained encrypted passwords and personal information on eBay users, though not financial data nor any personal or financial information about customers of its PayPal payment unit, the company said.

“PayPal data is stored separately on a secure network, and all PayPal financial information is encrypted,” eBay said.

Subscribe today! Click here for our subscription offers.

 

 


Show commenting policy

Most-Read Business Headlines

  1. Project to remedy Rostraver coal refuse slurry ponds beside popular trail
  2. Proposed rule on noise limits for oil, gas sites in Pa. pleases none
  3. Energy Spotlight: Jaime Johnson
  4. Bird flu ravaging commercial flocks remains mysterious
  5. Buffett fires back at unusual criticism as he marks 50 years at helm of Berkshire Hathaway
  6. U.S. Steel posts $75 million net loss despite job cuts
  7. Power grid operator PJM Interconnection chooses next CEO
  8. Where asbestos lawsuits thrive
  9. FirstEnergy prepares site for coal waste from power plant in Shippingport
  10. Meadows Casino, Tanger Outlets seek to hire hundreds in Washington County
  11. MedExpress bought by United Health Group