Boston Man Who Hacked eBay Website Indicted for Stealing Users Credit Card Info

[mandy]

A Boston man was indicted Thursday on charges that he hacked into online auctioneer eBay Inc.'s site, stole users' credit card numbers and then used them to purchase more than $32,000 worth of online gift certificates.

Sean Galvez, 20, was indicted on one count of larceny by a single scheme and 10 counts each of violating the unauthorized access statute and violating the identity fraud statute. He was scheduled to be arraigned Jan. 18.

Galvez gained access to more than 40 eBay accounts, changed passwords and retrieved credit card information between February 2003 and September 2003, according to the indictment.

full article: http://cbs4boston.com/massachusettswire/..._news_html

Is eBay Leaking Information?

The article says: "he hacked into online auctioneer eBay Inc.'s site...That would imply that there's a problem on eBay's end, and they have some sort of security hole that this guy exploited. If that's the case, it's an issue that eBay might want to address, because it could put other people at risk. However, the article barely focuses on that part at all, so it's possible that this was a more typical scam (phishing, perhaps) that allowed the guy to get account info and credit cards. Still, it would be nice to know whether or not others are at risk.

full article: http://techdirt.com/articles/20060105/1842215_F.shtml