eBay password reset request

[pape_timmo]

Hi folks,

Has anyone else had an email from eBay requesting or advising that they reset their password due to data being accessed by unauthorised persons on Feb or March?

I've clicked on the link from a topic on here about le Shuttle products on eBay, and suddenly the email came though... Seems a bit odd to me?

Thoughts please guys and girls?

Cheers, Timmo

[NeMo]

It's an actual thing.

http://www.bbc.co.uk/news/technology-27503290

But needless to say, there could easily be crooks sending out bogus eBay e-mails, attempting to get you to enter your details into a fake website. Best to log into eBay directly if you can't be sure the e-mail you go is kosher.

Cheers, NeMo

[pape_timmo]

Cheers NeMo, I'll do that.

Cheers, Timmo

[scottmitchell74]

Yeah, I changed mine. It's been all over the news. Good question, though. Can't be too careful these days and things like being asked to change a password should raise red flags.

[37058]

I have changed mine also

Cheers, Anthony

[zwilnik]

and of course, don't click links in any emails asking you to password reset. Always go directly to the site itself via your own bookmarks or typing in the URL. (as a good phishing email will of course have a fake link).

[pape_timmo]

Thanks folks, went to the main site and changed it. Was just a strange coincidence that the mail arrived as soon as I clicked onto eBay, set alarm bells ringing.

Cheers, Timmo

[Newportnobby]

Yeah - I went to bid on something yesterday and was immediately asked by Fleabay to change my password

[port perran]

Yes it's genuine. The worry is that whoever hacked into Ebay originally knows that many people use the same passwords/logins for other things so could easily gain access to other sites that you log into.
I guess ideally, we should change every single password !

[Tom@Crewe]

You should renew most passwords, not sure about frequency but I do important ones - Bank, paypal etc every 6 months.

[cjdodd]

The database that was stolen has all the passwords encrypted, the issue is that it contained lots of other data about you that was not, name, address, dob etc.. etc..

With these details its possible for someone to gain access to other systems by using that information to reset passwords etc. etc..

[trkilliman]

I re-set mine a few days back. It will be interesting to see peoples accounts become compromised as a result of this, and importantly if they have an redress.  Time will tell.

[jonclox]

I was sceptical when I received the email so I ignored it and logged into my account direct. There I was yet again advised to change my password so I gathered that it was genuine. Even if not its about time I changed a few passwords around the net.

[Luke Piewalker]

I was mostly concerned that I heard it on the news before I heard it from eBay.
The simplest thing to do is NEVER follow a link in an email to eBay.
Any messages you get by email will also appear in your eBay messages, so you can respond there.
I use keepass password safe to store and generate all my passwords. This way they are saved in an encrypted file, and have no pattern to them.
On the downside, this means I am entirely dependent on my password safe as the passwords are gibberish, and spectacularly long...
So if I forget my password for the password safe, I'm in a bit of a bind...

[tutenkhamunsleeping]

Noted on a well-known spoof news site: "250m assorted passwords. 99p start. No Reserve"