[Dataloss] (update) eBay forum mysteriously leaks account details on 1, 200 users

[Cory Gould]

Why would ebay have credit cards to begin with, unless paypal was breeched
and the ebay discussion group used to spread the word. Also, correct me if
I'm wrong but I don't believe paypal/ebay requests CVV2 information when
signing up anyway. In fact, the only time I'm required to give out that
information is when using a credit card over the phone, never online.

On 9/26/07, Avery Sawaba <avery.sawaba at gmail.com> wrote:
>
> On 9/26/07, Arsen Shirokov <1and1 at canadaballoons.com> wrote:
> > The fact that the data was posted on eBay forum doesn't necessarily
> > mean it was stolen from eBay.
>
> Hence my disclaimer, "If this information is accurate". The fact that
> CVV2 data is included may help disprove their claim, as it is highly
> unlikely that someone like Ebay would be foolish enough to do so.
>
> --Sawaba
> _______________________________________________
> Dataloss Mailing List (dataloss at attrition.org)
> http://attrition.org/dataloss
>
> Tenable Network Security offers data leakage and compliance monitoring
> solutions for large and small networks. Scan your network and monitor your
> traffic to find the data needing protection before it leaks out!
> http://www.tenablesecurity.com/products/compliance.shtml
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://attrition.org/pipermail/dataloss/attachments/20070926/a280a309/attachment.html