The eBay data breach affected a significant number of users, exposing personal information that can be used for identity theft, phishing, and fraud. If you've ever had an account or relationship with eBay, it's worth checking whether your data was involved.
What Happened
eBay disclosed a major data breach in May 2014 after discovering that attackers had used a small number of compromised employee login credentials to gain access to eBay's corporate network and, from there, the entire user database, affecting approximately 145 million active users worldwide.
What Data Was Exposed
The exposed data included encrypted passwords, names, email addresses, physical addresses, phone numbers, and dates of birth. eBay stated that financial information, including PayPal details, was stored separately and was not affected.
Why This Still Matters
Even breaches from years ago remain a risk today. Stolen data is sold, traded, and reused indefinitely. Credentials from old breaches fuel credential stuffing attacks — automated attempts to reuse your email and password combination on other sites. If you reused a password anywhere, one old breach can compromise several current accounts.
How to Check If You Were Affected
Use our free breach checker below — enter your email and we'll scan it against known breach databases instantly, no signup required.
What to Do If You Were Affected
- Change any reused password immediately, starting with your most sensitive accounts.
- Enable two-factor authentication wherever it's offered.
- Monitor financial accounts closely if payment or banking data was involved.
- Watch for phishing — breach data is often used to craft convincing scam messages.
- Freeze your credit if your SSN or government ID number was exposed.
👉 Check your own exposure in 30 seconds → scan your email free.
Frequently Asked Questions
When did the eBay data breach happen?
Attackers had access to eBay's network for approximately 229 days, from late February to early March 2014. eBay discovered and disclosed the breach in May 2014, prompting a password reset for all 145 million active users.
What data was stolen in the eBay breach?
Encrypted passwords, names, email addresses, physical addresses, phone numbers, and dates of birth were exposed. Financial information, including PayPal account details, was stored on separate systems and was not affected.
How did the eBay breach happen?
Attackers compromised the login credentials of a small number of eBay employees, likely through phishing, and used that access to move into eBay's corporate network and reach the user database.
How do I check if my eBay account was affected?
Given the scale of this breach (145 million users), it's highly likely your account was included if you had an eBay account in 2014. Check your email at Scan My Shadow and ensure your eBay password isn't reused anywhere else.
Was eBay fined for the 2014 breach?
eBay faced criticism for a slow public response and unclear communication, though it did not face a major regulatory fine comparable to later breaches like Equifax, partly due to the encrypted state of the passwords.