I was hacked, eBay is clueless

[beautyfixed]

This is my selling experience with eBay over the past two days.... let your fellow sellers know!!!!!!!

"I called your customer service. My account was hacked. Your specialist told me he had never seen anything like what had happened to my account before. I actually had to tell him what I thought was going on, then he checked into it for me. These hackers went in my account and changed my business policies. Each time someone checked out, my money went into a different email. He couldn't help me fix it. I had to end 78 listings.. ( i cannot even fathom how much that cost me) and I had to cancel so far 19 orders ($282.50) just in cancelled sales.....that is a HUGE amount of damage done to my account. A HUGE loss of revenue, a HUGE loss of customers, and a huge risk to my business. What I want to know is why didnt eBay protect my account? Why was my business damaged so severely with eBay even knowing? How does this happen and eBay has no clue how to fix it? And what is eBay going to do to compensate my loss? If I didn't insist on your specialist taking a look into the email addresses that attached to my account...... I would still be losing revenue."

[eunster1313]

Use the contact us immediately link in this page.

Get help with a hacked account

https://www.ebay.com/help/account/protecting-account/get-help-hacked-account?id=4196&st=12&pos=3&que... 

[inhawaii]

I'm really sorry that happened to you .... but why is it ebay's fault?

[dubiousgain]

So, what you're saying is there's absolutely no accountability, anywhere?  What if somebody's account is hacked, post managed payments?  Once attached Bank information and possibly social security numbers... I mean anymore these hijackers are quite clever.  This is the reservation I have about MP.  There are institutions far larger than eBay with far tighter security that have been hacked.  Do you remember 6 [or so] years ago when eBay was hacked? How many weeks had passed before we were even notified of it? And now that eBay is harvesting more personal information there is much more at stake. When things like this happen, if eBay isn't accountable, then who is? Has anybody taken the time to read the fine print on managed payments, about eBay using our personal information, as they see fit? Anymore, everything, and I mean EVERYTHING is connected and overlapping.

[andrew547]

Sorry to hear your account was hacked.

This and other reports of hacking make me wonder if there are any implications for Managed Payments.

[luckythewinner]

@dubiousgain wrote:

So, what you're saying is there's absolutely no accountability, anywhere?

---

Most account hacks like this happen because the account holder is tricked into revealing their login information through social engineering.

And if the user shares the same account information (password, email, username) across multiple sites, that information may not have even been obtained through eBay directly.

[ja-2149]

You were hacked because of a lapse in your own computer security: You gave away, unwittingly, your login credentials.

Like every other website, eBay does not have your password in plain text to be stolen: It is encrypted the first time, then stored. The next time you enter your password, it is encrypted, then compared against the stored version.

Only you, and the hacker/phisher/whatever with whom you shared your password, know your password.

[u_cant_take_it_with_u]

What about the eBay hack that DG mentions of 6 years ago?  That affected thousands of members... Was that their fault too?  The O/P could have been target by a blanket hack, which works in a very different way.  It hits  many accounts at the same time. Basically a net is cast out over a group of people, and randomly takes the route of least resistance, not always contingent on the members security methods.

[hawkwind5454]

I would be interested in hearing the OP's response to some of these threads. Please, favor us beautyfixed....  Do you feel that you were your own worst enemy in creating your debacle?  Please elaborate, enumerate, and stipulate.😊

[heakal-54]

Just for the sake of playing devil's advocate...

I dare say the amount of incidents that are blamed on hacks or glitches (which are in fact due to user error) is far higher than most people think.

---

@luckythewinner wrote:

Most account hacks like this happen because the account holder is tricked into revealing their login information through social engineering.

And if the user shares the same account information (password, email, username) across multiple sites, that information may not have even been obtained through eBay directly.

---

I rest my case.

[valueaddedresource]

---

---

@beautyfixed  first let me say I am so sorry this has happened to you.

What you are describing sounds like the fraud/hacking that occurred in the UK last year but didn't get a lot of publicity here in the states.  https://tamebay.com/2019/07/hacked-ebay-account-changed-paypal-address-and-stole-20k.html

I have also seen a large increase in hacked accounts being used for fraudulent buying and selling over the last few months as I've detailed here and here

eBay also made headlines recently when it was discovered they are engaging in port scanning user's computers as part of a 3rd party fraud/risk management solution.

All of that is to say, while it is possible that the compromise could be linked to a lapse in security on your side, there is a bigger picture in play here that suggests bad actors may have discovered a new, very reliable way to gain unauthorized access to a large amount of eBay accounts.

With all of the research I have done, and with reading a variety of reports here in the community and across social media about accounts being compromised and used for fraud, I am fairly confident in saying there is something going on that is beyond your typical phishing email scam.

[valueaddedresource]

Also, please take a moment to let the FBI's internet crime division know about your experience with fraud on eBay.  https://www.ic3.gov/default.aspx  

You may want to reach out to your state's Attorney General's office and the FTC as well if eBay is not helpful in this matter.

[dubiousgain]

---

@heakal-54 wrote:

I dare say the amount of incidents that are blamed on hacks or glitches (which are in fact due to user error) is far higher than most people think.

---

I rest my case.

---

Your case???  Mercy . ..😉  Even if that statement has credulity, it still doesn't negate all the instances that are not caused by user error.

[heakal-54]

---

@dubiousgain wrote:

---

@heakal-54 wrote:

I dare say the amount of incidents that are blamed on hacks or glitches (which are in fact due to user error) is far higher than most people think.

---

I rest my case.

---

Your case???  Mercy . ..😉  Even if that statement has credulity, it still doesn't negate all the instances that are not caused by user error.

---

First you replied to the wrong person, my name ain't Mercy.

See how that happens?

So lets read that first part again:

I dare say the amount of incidents that are blamed on hacks or glitches (which are in fact due to user error) is far higher than most people think.

Statement which your reply actually reinforced when you stop and think about it.

But you have to stop and think, stop all that extra noise and all those things you're doing and before you reply read everything, then stop and think.

[valueaddedresource]

---

@inhawaii wrote:

I'm really sorry that happened to you .... but why is it ebay's fault?

---

@inhawaii  - eBay is aware of the same fraud (diverting of payments by changing the payment email address on the listing) happening in the UK early last year.  They mostly swept it under the rug/deflected to PayPal.  They certainly didn't warn sellers in the US or elsewhere that it had happened and to be on the look out for this kind of suspicious activity.

Also, as noted in my previous reply, there appears to be a bigger picture issue going on with user account security on this site and again, eBay is doing their best to avoid acknowledging it.

So yes, if this kind of fraud has been happening for over a year and eBay has done little stop it or at least warn sellers about it, I believe they bear some fault and responsibility.