PHP Vulnerability Responses by Company

eBay Inc.

Companies / web services
Aliases / services
eBay / イーベイ（米国） / eBay Inc.
Official website
https://www.ebay.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

US eBay user accounts

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

On May 21, 2014, eBay disclosed unauthorized access in late February to early March 2014. Compromised employee credentials led to a database containing names, encrypted passwords, contact details and birth dates being breached. eBay reported no evidence of unauthorized access to financial or card information.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

If you still use the password from that period, change it and replace passwords reused on other services with distinct passwords. The original notification asked all eBay users to change their passwords.

Official service URL

Source URLs

  1. Official operator evidencehttps://www.ebay.com/help/policies/member-behavior-policies/user-agreement?id=4259Service and operation documentation
  2. Official incident noticehttps://investors.ebayinc.com/investor-news/press-release-details/2014/EBay-Inc-ToAsk-eBay-Users-To-Change-Passwords/default.aspxService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies eBay Inc. and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments