OT: ebay Store Hacked

[Buythatcard]

The following might be long winded, but it's actually the short version of what happened to my eBay store.

A few days ago, I logged into my eBay account to process some orders and I was not able to log in. It turns out that someone actually hacked my account and changed the password. They also forwarded any money that I received from sales directly into one of their accounts.
In addition, they hacked my Paypal account and transferred money to another person.

Finally, they hacked my Xfinity mail account and forwarded all of mail to another eMail account. In addition, they placed a rule which would forward all of my mail to another account if the subject contained “bay”.
By taking over my mail, they were able to change the password on eBay & Paypal. All they had to do was respond to the confirmations that were sent.
I spoke to Paypal and they put a stop on all the transactions They also walked me thru to set up a more secure login by using two step authorization when logging in.

I spoke to eBay and Xfinity and they pretty much did the same thing. Xfinity said that they would escalate it and have some one call back. No one ever did.
The next day, I was hacked again even though I had 2 step authorization set up.
I called Paypal but was on hold for over 45 minutes and never got thru.
I called Xfinity and asked how did they update the autoforward field (automatically forwards my email to another account). They said that they need to see it actually populated. I explained to them that I deleted it as soon as I saw it. They said they would look into it and have someone call back. Never called.

Now here’s the best part. During this round of hacking to eBay, the hacker changed all of my personal info. Address, email, phone #, bank info, etc. I called eBay, and asked how can this happen if I set my account up with 2 step authorization. They said the hacker must have got in before I changed it. They walked me thru everything that I need to fix. They did some updates on their side. When they completed their part, I told them to hold on while I tried logging into eBay. I was able to log in but my store was no longer there. The eBay agent said that it will appear within the hour.
Well, the store never appeared again. Once again, I called eBay and they said that they closed my store and deleted all my listings. I asked “why the
f—k did you do that without telling me. They said it was done to protect my account. They also said that I would need to create the store from scratch and relist almost 300 items. In addition, they deleted all past sales records. So, any customer that won an item over the last week and have not paid actually has no record of that item.

While on the phone with eBay, I received an eMail saying that eBay settled a case in favor of the buyer. I said to myself, "Now What?". Since I was on the phone with eBay, I told them about this eMail that I just got. I was not aware of any case. Apparently, a buyer from Canada claimed that they did not receive an item. They just happened to open a case while I was on the phone. with eBay. So, eBay awarded them the full amount without giving me a chance to respond. The reason they did that was because my account was compromised. It has only been a week since I shipped the item. I didn't even get the opportunity to address it. I made a big stink about it to the agent and they said that they are going to refund the money to both the buyer & me. So, the buyer gets his money back plus a free card.

After discussing the buyer case, the ebay agent said that they would restore the sales record within 24 hours. Well, 24 hours passed and they never did. Called them again last night and was told it would be done again in a few hours. It’s been 14 hours and nothing.
So, now I am relisting all of my items. Also, trying to explain to my customers who had their bids wiped out what happened. The hardest thing to do is explain to those who have won items and now have no record of it.

All I can say is that anyone who hacks someone’s account should burn in hell.

eBay’s customer service SUCKS!

After this experience, I question myself and say why do I continue in this business? Is the aggravation worth it? There is absolutely no support from eBay, Paypal & Xfinity.

[nsaddict]

So sorry to hear Howard. I would have lost it. I’d be just as pissed at eBay as the hacker!

[D. Bergin]

Wow, that's awful Howard. Sorry that happened to you. I think that particular nightmare is in the back off all of our minds. It could happen to anybody.

[Buythatcard]

I never thought that I would be on the receiving end of a hacker. I thought I had my accounts and desktop protected but I guess they can always find a way in.

As much as I hate these f---ers that did this me, I am just as pissed off with the customer service reps that I spoke to. I have done a fair amount of business over 18 years and have paid my dues to eBay & Paypal. Yet, they treated my issues like it was nothing.

Just imagine, you wake up one morning to see that your Paypal account has been compromised. Somebody has been taking your money. You then try calling Paypal and you deal with an automated response system that takes you in circles until you finally think that you are getting thru and are left on hold for 45 minutes.

[marzoumanian]

As others have said, I am sorry this happened to you.
But please remember that your health is number one, both mental and physical.
Writing down what happened to you is an excellent way to get it out of your system. You can't let the hacker cause you to lose sleep, not eat, or take it out on your loved ones.
I know it is easy for me to say as an outsider but "this too shall pass."
Peace and best of health.

P.S. I am not a doctor but I do play one on tv!

[Buythatcard]

Originally Posted by marzoumanian

As others have said, I am sorry this happened to you.
But please remember that your health is number one, both mental and physical.
Writing down what happened to you is an excellent way to get it out of your system. You can't let the hacker cause you to lose sleep, not eat, or take it out on your loved ones.
I know it is easy for me to say as an outsider but "this too shall pass."
Peace and best of health.

P.S. I am not a doctor but I do play one on tv!

Good advice but easier said than done. At first I was pissed off and ready to track down these hackers. But then I said I was knocked down but not knocked out. Life goes on with or without these scummy people in our lives.

[Rhotchkiss]

Howard, I would go to the three credit bureaus and freeze your credit. I would also change all passwords to everything, especially bank accounts (including PayPal) and get new credit cards. You want to make sure that this problem is confined to eBay and does not grow to other areas in your life.

[Buythatcard]

Originally Posted by Rhotchkiss

Howard, I would go to the three credit bureaus and freeze your credit. I would also change all passwords to everything, especially bank accounts (including PayPal) and get new credit cards. You want to make sure that this problem is confined to eBay and does not grow to other areas in your life.

Good advice. I already started that process.

[brob28]

Originally Posted by Rhotchkiss

Howard, I would go to the three credit bureaus and freeze your credit. I would also change all passwords to everything, especially bank accounts (including PayPal) and get new credit cards. You want to make sure that this problem is confined to eBay and does not grow to other areas in your life.

Yes - do this.

[FourStrikes]

Originally Posted by Buythatcard

The following might be long winded, but it's actually the short version of what happened to my eBay store.

A few days ago, I logged into my eBay account to process some orders and I was not able to log in. It turns out that someone actually hacked my account and changed the password. They also forwarded any money that I received from sales directly into one of their accounts.
In addition, they hacked my Paypal account and transferred money to another person.

Finally, they hacked my Xfinity mail account and forwarded all of mail to another eMail account. In addition, they placed a rule which would forward all of my mail to another account if the subject contained “bay”.
By taking over my mail, they were able to change the password on eBay & Paypal. All they had to do was respond to the confirmations that were sent.
I spoke to Paypal and they put a stop on all the transactions They also walked me thru to set up a more secure login by using two step authorization when logging in.

I spoke to eBay and Xfinity and they pretty much did the same thing. Xfinity said that they would escalate it and have some one call back. No one ever did.
The next day, I was hacked again even though I had 2 step authorization set up.
I called Paypal but was on hold for over 45 minutes and never got thru.
I called Xfinity and asked how did they update the autoforward field (automatically forwards my email to another account). They said that they need to see it actually populated. I explained to them that I deleted it as soon as I saw it. They said they would look into it and have someone call back. Never called.

Now here’s the best part. During this round of hacking to eBay, the hacker changed all of my personal info. Address, email, phone #, bank info, etc. I called eBay, and asked how can this happen if I set my account up with 2 step authorization. They said the hacker must have got in before I changed it. They walked me thru everything that I need to fix. They did some updates on their side. When they completed their part, I told them to hold on while I tried logging into eBay. I was able to log in but my store was no longer there. The eBay agent said that it will appear within the hour.
Well, the store never appeared again. Once again, I called eBay and they said that they closed my store and deleted all my listings. I asked “why the
f—k did you do that without telling me. They said it was done to protect my account. They also said that I would need to create the store from scratch and relist almost 300 items. In addition, they deleted all past sales records. So, any customer that won an item over the last week and have not paid actually has no record of that item.

While on the phone with eBay, I received an eMail saying that eBay settled a case in favor of the buyer. I said to myself, "Now What?". Since I was on the phone with eBay, I told them about this eMail that I just got. I was not aware of any case. Apparently, a buyer from Canada claimed that they did not receive an item. They just happened to open a case while I was on the phone. with eBay. So, eBay awarded them the full amount without giving me a chance to respond. The reason they did that was because my account was compromised. It has only been a week since I shipped the item. I didn't even get the opportunity to address it. I made a big stink about it to the agent and they said that they are going to refund the money to both the buyer & me. So, the buyer gets his money back plus a free card.

After discussing the buyer case, the ebay agent said that they would restore the sales record within 24 hours. Well, 24 hours passed and they never did. Called them again last night and was told it would be done again in a few hours. It’s been 14 hours and nothing.
So, now I am relisting all of my items. Also, trying to explain to my customers who had their bids wiped out what happened. The hardest thing to do is explain to those who have won items and now have no record of it.

All I can say is that anyone who hacks someone’s account should burn in hell.

eBay’s customer service SUCKS!

After this experience, I question myself and say why do I continue in this business? Is the aggravation worth it? There is absolutely no support from eBay, Paypal & Xfinity.

crazy/clown world we're living in...wish you a positive outcome...good luck.

[drcy]

Where everyone can, people should set up log-ins with a backup such as your cellphone. When I log in to those places, I get a message on my phone for secondary approval. I have that with facebook, google, bank, etc. Makes hacking so much harder. They can't just guess a password, but need your phone too.

[Buythatcard]

Originally Posted by drcy

Where everyone can, people should set up log-ins with a backup such as your cellphone. When I log in to those places, I get a message on my phone for secondary approval. I have that with facebook, google, bank, etc. Makes hacking so much harder. They can't just guess a password, but need your phone too.

I did have it setup this way, yet I was still hacked. It does make it more difficult but some of these hackers are professionals who know every trick in the world.

[DanP]

I would do all of the suggestions above on a different computer. It’s possible that they hacked into your PC!!

[Eric72]

Originally Posted by DanP

I would do all of the suggestions above on a different computer. It’s possible that they hacked into your PC!!

^ ^ ^ ^
Yes, this.

[bnorth]

I feel for you Howard. Had the same thing happen a few years ago.