123ArticleOnline Logo
Welcome to 123ArticleOnline.com!
ALL >> Computers >> View Article

How Bad Is The Ebay Breach? Here Are The Stats

Profile Picture
By Author: Skyhighnetworks
Total Articles: 54
Comment this article
Facebook ShareTwitter ShareGoogle+ ShareTwitter Share

eBay announced today that hackers had infiltrated their systems and stolen the passwords of 145 million users. In addition to account passwords, hackers obtained names, email addresses, birthdates, physical addresses and phone numbers.

Was financial information compromised?

According to eBay, the breach did not include credit card numbers or financial information from PayPal, which is owned by eBay. (For the latest from eBay, visit their blog.)

That being said, eBay users are now particularly subject to phishing attacks. Reason being is that criminals will have access to personal information that could help them trick an unsuspecting eBay user into sharing additional information or clicking on a malicious link.

How the breach was discovered

Mark Carges, eBay’s Chief Technology Officer, said the company discovered the breach after noticing several unusual behaviors on the company network. Essentially, eBay detected anomalies (activities statistically separated from normal behavior) in their network usage. It’s worth noting that Skyhigh uses a similar strategy to identify ...
... security breaches at customers, but instead of looking for anomalies in the network usage within an enterprise, we look for anomalies in all data leaving your enterprise.

Upon investigating, Carges and the FBI discovered that hackers had learned employee passwords and used their credentials to access internal systems, starting in as far back as February.

The question enterprises are now asking is, “How bad is it?”

How bad is it?
In terms of breadth – this breach has widespread reach. Our data shows that 99% of companies have employees who are using eBay, and doing so from work. Even more, the average Fortune 2000 company has just approximately 15,800 employees using eBay.

In terms of impact to corporate Security, this breach does not have the impact of the Heartbleed vulnerability or even XP’s end of support. Reason being is that most eBay users visit the service exclusively for personal reasons and do not store sensitive corporate data within the service.

That being said, employees often use the same password across Cloud Security services. According to a recent study by Joseph Bonneau, from the University of Cambridge, 31% of passwords are re-used. This is critical because it means that hackers can use eBay credentials to guess the login/password information of other corporate cloud services. Applying the 31/100 ratio from the study across the average 15,800 eBay users per company shows that approximately 4,900 employees per company have passwords to other cloud services that could be guessed using compromised eBay credentials.

Attackers could also conduct phishing attacks that could compromise their devices and put corporate data at serious risk. For this reason we advise eBay customers to change all of their credentials for all cloud services if they match those used in eBay.

In addition, Skyhigh continuously analyzes cloud service usage and will alert customers of any unusual behavior that may indicate a breached account.

Author :
Skyhigh Networks, the Cloud Security Services company, enables companies to embrace Cloud Security Services with appropriate levels of security, compliance, and governance while lowering overall risk and cost. With customers in financial services, healthcare, high technology, media, manufacturing, and legal verticals, the company was a finalist for the RSA Conference 2013 Most Innovative Company award and was recently named a "Cool Vendor" by Gartner, Inc. Headquartered in Cupertino, Calif., Skyhigh Networks is led by an experienced team and is venture-backed by Greylock Partners and Sequoia Capital. For more information, visit us at http://www.skyhighnetworks.com/ or follow us on Twitter@skyhighnetworks.

Total Views: 482Word Count: 572See All articles From Author

Add Comment

Computers Articles

1. Web Scraping Top Grocery Chains In Michigan
Author: FoodDataScrape

2. How Refurbished Laptops Help Students Save Money And Study Smarter In 2025
Author: usedstore

3. Why The Ls3002 Barcode Scanner Is Perfect For Retail In 2025
Author: prime pos

4. Does Cleaning Temporary Files Really Improve Laptop Speed? (what To Expect)
Author: Neha Jain

5. Extract Supermarket Data From Walmart & Target In Usa
Author: FoodDataScrape

6. How Odoo Partners Drive Growth: From Implementation To Innovation
Author: Alex Forsyth

7. Leverage Web Scraping Cold Drinks Data On Swiggy Instamart
Author: FoodDataScrape

8. Empowering Universities Through Student Engagement Crm Solutions|e2s
Author: Brenda Joyce

9. Odoo Manufacturing And Lean Practices For Small And Medium Enterprises
Author: Alex Forsyth

10. How Posiflex Pos Machines Enhances Customer Service
Author: pbs

11. Scrape Keeta Food Delivery App Data In Saudi Arabia For Insights
Author: FoodDataScrape

12. Microsoft Office Professional Plus 2021 Vs. Microsoft Office Professional Plus 2024: Which One Should You Choose?
Author: davudobuya55

13. Microsoft Office Professional Plus 2019 Vs. Microsoft Office Professional Plus 2019 Dvd: Which Version Should You Choose?
Author: davudobuya55

14. Microsoft Office Professional 2024 Vs. Microsoft Office Professional Plus 2010: Which One Is Right For You?
Author: davudobuya55

15. Microsoft Office Home Business 2021 For Mac Vs Microsoft Office Home Student 2021 For Mac: Which Is Right For You?
Author: davudobuya55

Login To Account
Login Email:
Password:
Forgot Password?
New User?
Sign Up Newsletter
Email Address: