Is eBay Leaking Information?

from the just-wondering... dept

The Associated Press has a story about a man who's been indicted for getting his hands on a bunch of eBay accounts, including credit card info, and using those accounts to purchase $32,000 worth of gift certificates. Yet another eBay scam isn't that interesting, of course, but what's unclear from the article here is exactly how this guy got the info. The article says: "he hacked into online auctioneer eBay Inc.'s site, stole users' credit card numbers and then used them." That would imply that there's a problem on eBay's end, and they have some sort of security hole that this guy exploited. If that's the case, it's an issue that eBay might want to address, because it could put other people at risk. However, the article barely focuses on that part at all, so it's possible that this was a more typical scam (phishing, perhaps) that allowed the guy to get account info and credit cards. Still, it would be nice to know whether or not others are at risk.

9 Comments | Leave a Comment..


If you liked this post, you may also be interested in...
 

Reader Comments (rss)

(Flattened / Threaded)

  1.  

    ebay

    identicon
    anonymous Coward, Jan 5th, 2006 @ 8:27pm

    "he hacked into online auctioneer eBay Inc.'s site, stole users' credit card numbers and then used them."

    reply to this | link to this | view in thread ]

  2.  

    A little more Info...

    identicon
    Don Gray, Jan 5th, 2006 @ 8:33pm

    Slightly better info here.

    He is charged with Larceny (unlawful taking) by a single scheme as well as inappropriately accesing computer information.

    Wonder if this and this are the same guy?

    reply to this | link to this | view in thread ]

  3.  

    ebay credit card problem

    identicon
    Jeremy Rice, Jan 5th, 2006 @ 10:02pm

    If ebay has a problem with customer data being exposed then they would be obligated to inform the public...I doubt they would ignore this obligation as they could potentially face larger legal issues if they were caught breaking the law.

    reply to this | link to this | view in thread ]

  4.  

    Re: ebay credit card problem

    identicon
    Andrew Strasser, Jan 5th, 2006 @ 10:26pm

    Ebay would bend yuou over if they think they can get away with it. I think this phase is called phishing.

    reply to this | link to this | view in thread ]

  5.  

    The Media

    identicon
    Zach Skaggs, Jan 6th, 2006 @ 3:11am

    If ebay had a security hole, the media would jump ALL OVER IT. Think about it. They will SLAM Microsoft for a small security hole that Microsoft finds and fixes on it's own that was most likely never exploited. If ebay had a flaw allowing for peoples credit card information to be stolen, we'd never hear the end of it.

    reply to this | link to this | view in thread ]

  6.  

    No Subject Given

    identicon
    Chris H, Jan 6th, 2006 @ 5:19am

    Someone above said eBay would be obligated under law to disclose if customer information was comprimised. Is this true? I often here reports of this kind of data loss, and the question is always how many other losses are there that go unreported.

    reply to this | link to this | view in thread ]

  7.  

    Re: No Subject Given

    identicon
    Pat, Jan 10th, 2006 @ 5:15am

    I know from personal experience that ebay must have some kind of hole and they refuse to admit it. In late November, I had a bunch of auctions for high end electronics stuff just appear on my seller's list one morning. They were NOT my auctions. Thank goodness the scammer didn't change my password soI wasable to still sign in and get to safe harborlive help to get it sorted out. Ebay didn't even ask me which item numbers were the problem. They disappeared in a flash. I had to jump through all kinds of hoops to get everything sorted out, but it got resolved pretty fast. I know for a fact that I had not clicked on a phishing email....I'm super careful.....so how did the crook hack my account ???????About a week later another seller I know had the same thing happen. I believe it is muchmore common than we know!

    reply to this | link to this | view in thread ]

  8.  

    ebay hole and fraud

    identicon
    Anonymous Coward, Jan 17th, 2006 @ 2:59pm

    check for a "dell xps laptop" and you will many 1 day listing with a seperate email in the listing. if you email them they will offer you a sweet price if you pay via western union.
    you'll see many sellers selling the same items under the same "email me for buy it now price, pay via western union." scam

    ebay definitely has a fraud problem.

    reply to this | link to this | view in thread ]

  9.  

    ebay hole and fraud

    identicon
    Anonymous Coward, Jan 17th, 2006 @ 3:00pm

    forgot to include my email

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>


A word from our Sponsors...
Follow Techdirt
Flattr rss rss
From the Techdirt Archive...
A word from our Sponsors...

Close

Email This