eBay has announced that it’ll be asking its users to change their eBay account passwords in response to a cyberattack that resulted in the theft of user information which included encrypted passwords and other non-financial data. The hackers were able to gain access and retrieve customer information that included eBay user names, encrypted passwords, email addresses, physical addresses, phone numbers, and dates of birth.
According to the company, there has been no evidence of unauthorized access or fraudulent account activity on any of the compromised accounts. Additionally, eBay says that no evidence of any unauthorized access to financial or credit card information was found. But the company will be asking its users to change their passwords as “best practice.”
eBay has not specifically stated how the hackers gained access to the database containing the information but they’ve said that the hack began when “Cyberattackers compromised a small number of employee log-in credentials, allowing unauthorized access to eBay’s corporate network.”
According to eBay, the breach occurred sometime between late February and early March but the company only detected the compromised employee log-in credentials two weeks ago. The company did assure users that no financial or credit card information was compromised and that they were “working with law enforcement and leading security experts, the company is aggressively investigating the matter and applying the best forensics tools and practices to protect customers.”
“Information security and customer data protection are of paramount importance to eBay Inc., and eBay regrets any inconvenience or concern that this password reset may cause our customers. We know our customers trust us with their information, and we take seriously our commitment to maintaining a safe, secure and trusted global marketplace,” said the company.
eBay will begin notifying users later today through different channels asking them to change their password. The company also recommends users who use the same password on other accounts to change those as well.