If you got an email from eBay saying “Important – eBay Password Reset Required”, and are wondering whether it is a scam or legitimate, you’re not alone. Here’s the scoop.
The email from eBay is actually legitimate. If, as we always tell you to do, you go directly to the site (rather than following a link in the email, although you will note that eBay didn’t even include a link – good for them!), you will see this notice on their front page:
And eBay is actually doing it very cleverly. When you log in with your old password (i.e. to change your password), instead of letting you change it directly, they will send a link to one of your known contact points – email, text, or phone call:
So, do heed this notice, and go reset your eBay password.
Here’s the full text of the email notice:
IMPORTANT: PASSWORD UPDATE
Dear eBay Member,
|We know you're sick of ads on websites. But we still need to pay to keep the lights on for you. So instead of huge ads and video ads, we use smaller, plainer ads. Still, if you'd like to support the Internet Patrol but not the ads, please consider supporting us here:|
To help ensure customers’ trust and security on eBay, I am asking all eBay users to change their passwords.
Here’s why: Recently, our company discovered a cyberattack on our corporate information network. This attack compromised a database containing eBay user passwords.
|Get notified of new Internet Patrol articles for free!
|Or Read Internet Patrol Articles Right in Your Inbox!
as Soon as They are Published! Only $1 a Month!
Imagine being able to read full articles right in your email, or on your phone, without ever having to click through to the website unless you want to! Just $1 a month and you can cancel at any time!
What’s important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.
What I ask of you: Go to eBay and change your password. If you changed your password on May 21 or later, we do not need you to take any additional action at this time.
Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place.
If you have only visited eBay as a guest user, we do not have a password on file.
If you used the same eBay password on any other site, I encourage you to change your password on those sites too. And if you are a PayPal user, we have no evidence that this attack affected your PayPal account or any PayPal financial information, which is encrypted and stored on a separate secure network.
Here are other steps we are taking:
As always, we have strong protections in place for both buyers and sellers in the event of any unauthorized activity on your account.
We are applying additional security to protect our customers.
We are working with law enforcement and leading security experts to aggressively investigate the matter.
Here’s what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers’ name, encrypted password, email address, physical address, phone number and date of birth.
However, the file did not contain financial information. And, after conducting extensive testing and analysis of our systems, we have no evidence that any customer financial or credit card information was involved. We also have no indication of a significant spike in fraudulent activity on our site.
We apologize for any inconvenience or concern that this situation may cause you. As a global marketplace, nothing is more important to eBay than the security and trust of our customers. We know our customers have high expectations of us, and we are committed to ensuring a safe and secure online experience for you on any connected device.
President, eBay Marketplaces
No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free? Thank you!
|Get notified of new Internet Patrol articles!