September 25, 2007

'Fraudster' posts confidential eBay member data on forum

The names and contact information -- as well as credit card information that is largely incorrect -- were posted on a eBay security forum Tuesday

Someone used an eBay discussion forum on Tuesday to post confidential information about eBay users along with what may be their credit card numbers.

The incident, first reported by AuctionBytes.com, a technology news site that focuses on e-commerce, led the e-commerce giant to shut down the forum, which ironically is devoted to the discussion of security issues.

Nichola Sharpe, an eBay spokeswoman, confirmed that on Tuesday morning someone the vendor describes as "a malicious fraudster" posted the names and contact information of 1,200 eBay members on the company's Trust & Safety discussion forum.

"This information could have been obtained as part of an account takeover. Since this time, our Trust and Safety team has been proactively addressing this situation," she said.

Along with members' information, the "fraudster" also posted what appear to be credit card numbers. However, if that's what they are, they don't match the ones eBay has on file for the members whose contact information was disclosed, Sharpe said.

"We are in the process of proactively contacting members by phone, so that if the information is valid somehow -- regardless how this fraudster acquired the information -- these members can take the steps they need to take to protect themselves," Sharpe said.

The "fraudster" didn't obtain the information by breaching eBay's security systems, so eBay thinks the culprit stole the information via methods like phishing, she said.

The company has posted more information in an official blog post.

The incident, which eBay continues to monitor, has been broadly reported and commented on by eBay users on this long thread.

In its article, AuctionBytes reported being able to access the forum and view several posts before they were removed.

The posts included fields labeled "Id verified" and "Store" along with a time-date stamp of the user registration, AuctionBytes reported, adding that it hasn't been able to verify the accuracy of the information viewed.

Close

On Twitter now

Business

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »
jojokinkaid 12-May-09 1:41pm
There is a forum I found on the internet that is free, and helps with Ebay, PayPal, business and the law. Just post any question, the experts will answer it if it has not already been answered! The forum has a lot of expert advice on it. http://www.modeeworld.com/forums I found advice there about how to avoid EBAY suspensions, get past PayPal limitations, also lots of detailed help on creating your own business, getting past trademark violations, VERO and lots more. Plus general advice on how best to sell on EBAY, what sells the best, how to get the best price for your product, really everything related to EBAY and internet business. Also advice about how EBAY really works and how PayPal really works. The inside scoop. Beautiful forum. I was made a moderator of the forum and I love it!

Sign up to receive Business Resource Alerts

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2009 Infoworld, Inc.