Autoplay: ON Autoplay: OFF
CNET News Video
eBay hack exposes users' birthdates, addressesOnline auction site eBay is the latest target of a cyberattack. CNET's Sumi Das explains what steps users should take to protect themselves and the specific personal details that were compromised.
[MUSIC] If you're one of the 145 million people who use eBay, the online marketplace wants you to change your password. We know that somebody hacked into a database owned by eBay of its customer information. And this happens sometime in late February or March. It was a little while ago. As a result, the hackers gained access to personal details, including users' name. Encrypted passwords, addresses, birth dates, phone numbers and email. An Ebay spokesperson told Cnet it learned of the security breach in early May, after discovering that a small group of employees' credentials were compromised, providing access to corporate networks. Ebay says no fraudulent activity has been detected, and financial and credit card information wasn't affected. In a statement, PayPal said "Extensive forensic research has shown no evidence of unauthorized access." Still, eBay is emailing all users and advising them to create new passwords. So, make your password non-obvious, totally unique, don't share it, use different passwords on different sites, especially the ones that contain the, your most essential information, like your bank sites. To further boost security, users should take advantage of two-factor authentication when available, which requires a pin code. In addition to a password. Even if somebody has your password, as long as they don't have your phone or your security key or whatever's providing you with that second layer of authentication, you're safe. Users who do detect suspicious activity should contact eBay Customer Service. In San Francisco, I'm Sumi Das CNET.com for CBS news.