Scams

Scams

by Mike Masnick




Is eBay Leaking Information?

from the just-wondering... dept

The Associated Press has a story about a man who's been indicted for getting his hands on a bunch of eBay accounts, including credit card info, and using those accounts to purchase $32,000 worth of gift certificates. Yet another eBay scam isn't that interesting, of course, but what's unclear from the article here is exactly how this guy got the info. The article says: "he hacked into online auctioneer eBay Inc.'s site, stole users' credit card numbers and then used them." That would imply that there's a problem on eBay's end, and they have some sort of security hole that this guy exploited. If that's the case, it's an issue that eBay might want to address, because it could put other people at risk. However, the article barely focuses on that part at all, so it's possible that this was a more typical scam (phishing, perhaps) that allowed the guy to get account info and credit cards. Still, it would be nice to know whether or not others are at risk.

9 Comments | Leave a Comment..

 
 

Reader Comments (rss)

(Flattened / Threaded)

  1. Jan 5th, 2006 @ 8:27pm

    ebay

    by anonymous Coward

    "he hacked into online auctioneer eBay Inc.'s site, stole users' credit card numbers and then used them."

    (reply to this comment) (link to this comment)

  2. Jan 5th, 2006 @ 8:33pm

    A little more Info...

    by Don Gray

    Slightly better info here.

    He is charged with Larceny (unlawful taking) by a single scheme as well as inappropriately accesing computer information.

    Wonder if this and this are the same guy?

    (reply to this comment) (link to this comment)

  3. Jan 5th, 2006 @ 10:02pm

    ebay credit card problem

    by Jeremy Rice

    If ebay has a problem with customer data being exposed then they would be obligated to inform the public...I doubt they would ignore this obligation as they could potentially face larger legal issues if they were caught breaking the law.

    (reply to this comment) (link to this comment)

  4. Jan 5th, 2006 @ 10:26pm

    Re: ebay credit card problem

    Ebay would bend yuou over if they think they can get away with it. I think this phase is called phishing.

    (reply to this comment) (link to this comment)

  5. Jan 6th, 2006 @ 3:11am

    The Media

    If ebay had a security hole, the media would jump ALL OVER IT. Think about it. They will SLAM Microsoft for a small security hole that Microsoft finds and fixes on it's own that was most likely never exploited. If ebay had a flaw allowing for peoples credit card information to be stolen, we'd never hear the end of it.

    (reply to this comment) (link to this comment)

  6. Jan 6th, 2006 @ 5:19am

    No Subject Given

    by Chris H

    Someone above said eBay would be obligated under law to disclose if customer information was comprimised. Is this true? I often here reports of this kind of data loss, and the question is always how many other losses are there that go unreported.

    (reply to this comment) (link to this comment)

  7. Jan 10th, 2006 @ 5:15am

    Re: No Subject Given

    by Pat

    I know from personal experience that ebay must have some kind of hole and they refuse to admit it. In late November, I had a bunch of auctions for high end electronics stuff just appear on my seller's list one morning. They were NOT my auctions. Thank goodness the scammer didn't change my password soI wasable to still sign in and get to safe harborlive help to get it sorted out. Ebay didn't even ask me which item numbers were the problem. They disappeared in a flash. I had to jump through all kinds of hoops to get everything sorted out, but it got resolved pretty fast. I know for a fact that I had not clicked on a phishing email....I'm super careful.....so how did the crook hack my account ???????About a week later another seller I know had the same thing happen. I believe it is muchmore common than we know!

    (reply to this comment) (link to this comment)

  8. Jan 17th, 2006 @ 2:59pm

    ebay hole and fraud

    by Anonymous Coward

    check for a "dell xps laptop" and you will many 1 day listing with a seperate email in the listing. if you email them they will offer you a sweet price if you pay via western union.
    you'll see many sellers selling the same items under the same "email me for buy it now price, pay via western union." scam

    ebay definitely has a fraud problem.

    (reply to this comment) (link to this comment)

  9. Jan 17th, 2006 @ 3:00pm

    ebay hole and fraud

    by Anonymous Coward

    forgot to include my email

    (reply to this comment) (link to this comment)

Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Plain Text HTML Save me a cookie
  • Plain Text: A CRLF will be replaced by break <br> tag, all other allowable HTML is intact
  • HTML: No formatting of any kind is done without explicitly being written in
  • Allowed HTML Tags: <b> <i> <p> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Close
Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Plain Text HTML Save me a cookie

Search Techdirt
And now, a word from our Sponsors..



Subscribe to Techdirt's Daily Email Newsletter

Techdirt's Daily Email Newsletter

Related Stories
Close
E-mail It