# Ebay security breach - they are requesting that all users change their passwords ASAP.

**URL:** <https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [May 21, 2014, 2:54pm UTC](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929 "2014-05-21T14:54:59Z")\
**Posts on this page:** 5\
**Page:** 2

<div class="post-metadata">

**Author:** ![troubledwater](https://avatars.discourse-cdn.com/v4/letter/t/f4b2a3/32.png) [@troubledwater](https://boards.straightdope.com/u/troubledwater)\
**Post date:** [May 24, 2014, 1:18am UTC](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929/21 "2014-05-24T01:18:20Z")

</div>

Apparently the eBay breach occurred in February/March. I changed my eBay password a month ago in response to Heartbleed (which was itself popularly reported well after the breach).

Do I need to change it again?

---

<div class="post-metadata">

**Author:** ![AaronX](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@AaronX](https://boards.straightdope.com/u/AaronX)\
**Post date:** [May 24, 2014, 2:36am UTC](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929/22 "2014-05-24T02:36:48Z")

</div>

> [@Mangetout](#):
>
> I think that’s because the passwords (or their hashes) are already out there somewhere. Someone who already has your password would be able to retain control of your account if the reset page started with the existing password.

So it’s not always like that? I guess this would be the good way to do it.

---

<div class="post-metadata">

**Author:** ![GusNSpot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gusnspot/32/436_2.png) [@GusNSpot](https://boards.straightdope.com/u/GusNSpot)\
**Post date:** [May 24, 2014, 5:02am UTC](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929/23 "2014-05-24T05:02:24Z")

</div>

Change it twice with a 30 minute break in between.

---

<div class="post-metadata">

**Author:** ![Urbanredneck](https://avatars.discourse-cdn.com/v4/letter/u/ea5d25/32.png) [@Urbanredneck](https://boards.straightdope.com/u/Urbanredneck)\
**Post date:** [May 24, 2014, 6:10am UTC](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929/24 "2014-05-24T06:10:06Z")

</div>

Dang it. I had been using a very good password - one that was hard to break but easy for me to remember.

---

<div class="post-metadata">

**Author:** ![JohnT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/johnt/32/15048_2.png) [@JohnT](https://boards.straightdope.com/u/JohnT)\
**Post date:** [May 27, 2014, 6:19pm UTC](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929/25 "2014-05-27T18:19:31Z")

</div>

Just got my email. Appreciate the timely notice, Ebay. Did y’all have to cash-flow the stamps or something? :rolleyes:

[Previous page](https://boards.straightdope.com/t/ebay-security-breach-they-are-requesting-that-all-users-change-their-passwords-asap/688929.md?page=1)