We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

eBay members' credit card details on forum

Fraudster publishes private eBay data

A "malicious fraudster" used an eBay discussion forum yesterday to post confidential information about eBay users. The poster also published what may be eBay users' credit card numbers.

The incident, first reported by AuctionBytes.com, a technology news site that focuses on e-commerce, led eBay to shut down the forum - ironically, devoted to the discussion of security issues.

Get the latest internet security news here

Nichola Sharpe, an eBay spokeswoman, confirmed that yesterday morning someone the vendor describes as "a malicious fraudster" posted the names and contact information of 1,200 eBay members on the company's Trust & Safety discussion forum.

"This information could have been obtained as part of an account takeover. Since this time, our Trust and Safety team has been proactively addressing this situation," she said via email.

Along with members' information, the "fraudster" also posted what appear to be credit card numbers. However, if that's what they are, they don't match the ones eBay has on file for the members whose contact information was disclosed, Sharpe said.

"We are in the process of proactively contacting members by phone, so that if the information is valid somehow - regardless of how this fraudster acquired the information - these members can take the steps they need to take to protect themselves," Sharpe said.

The "fraudster" didn't obtain the information by breaching eBay's security systems, so eBay thinks the culprit stole the information via methods such as phishing, she said.

The company has posted more information in an official eBay blog post.

The incident, which eBay continues to monitor, has been broadly reported and commented on by eBay users on this long thread.

In its article, AuctionBytes reported being able to access the forum and view several posts before they were removed.

The posts included fields labeled 'Id verified' and "Store', along with a time-date stamp of the user registration, AuctionBytes reported, adding that it hasn't been able to verify the accuracy of the information viewed.


IDG UK Sites

Best camera phone of 2015: iPhone 6 Plus vs LG G4 vs Galaxy S6 vs One M9 vs Nexus 6

IDG UK Sites

In defence of BlackBerrys

IDG UK Sites

Why we should reserve judgement on Apple ditching Helvetica in OS X/iOS for the Apple Watch's San...

IDG UK Sites

Retina 3.3GHz iMac 27in preview: Apple cuts £400 of price of Retina iMac with new model