The online sales and auction service eBay recently announced that it had been subject to a hacking attack, which led to a breach of its database and the leakage of sensitive information.
The database allegedly contained customer names, encrypted passwords, emails, postal addresses, phone numbers and dates of birth.
Cybercriminals are now advertising on Pastebin that they are offering “stolen copies” of the compromised database for sale.
However, eBay says the listing is fake. “We have checked all the published information and so far it does not correspond to authentic eBay accounts,” said company spokesman El Reg.
The scammers are offering for sale the “complete copy of eBay’s database” (which supposedly contains 145 million records) for the price of 1,453 BTC (or $750).
A small portion of the database, purportedly containing information on more than 12,000 eBay users, has been posted on Mega. The authenticity of the data has not been verified.
This sample includes names, email addresses, and postal addresses. Passwords are hashed and not disclosed.
However, the validity of the data is also questioned by several researchers, as they report that they have identified several of these elements in other existing leaks.
