You are using an older browser version. Please use a supported version for the best MSN experience.

EBay faces possible European probes over cyber-attack

LiveMint logoLiveMint 24-05-2014 Aoife White

Brussels: EBay Inc faces possible probes by the Luxembourg and UK data-protection authorities into a cyber-attack that exposed passwords and personal information, adding to investigations in US states.

Gerard Lommel, the head of Luxembourg’s privacy watchdog, said the regulator will decide next week whether to investigate the company over the data breach. UK Information Commissioner Christopher Graham said in a blog post that he’s actively looking at the situation with a view to launching a formal investigation.

A database containing encrypted passwords and personal information was breached from late February to early March, the San Jose, California-based company said 21 May. EBay urged users to change their passwords, while noting that credit card numbers are stored separately and there was no evidence of unauthorized activity resulting from the breach.

Luxembourg has already told EBay that it will expect answers over the breach, Lommel said in a phone interview on Saturday. The country’s regulator would take charge of any data- protection investigation because it’s responsible for all users that have signed a contract with EBay in Europe, he said.

‘Big deal’

This is a big deal and we will for sure stay in close contact with our colleagues in other data protection authorities in Europe, Lommel said. The first steps will be to see where the risks now are and what the company’s plans are to remedy the situation.

EBay has reached out to relevant authorities to work with them and will continue to cooperate, Amanda Christine Miller, a spokeswoman for the company, said in an e-mail on Thursday.

Nothing is more important to EBay than ensuring the security of our customers’ information and the protection of their data, and we are committed to doing the right thing for them, Miller said. We are committed to working with the relevant regulatory and governmental authorities to address their questions about this matter.

Regulators usually take charge of compliance for US companies that have European headquarters in their countries. EBay’s European base is in Luxembourg.

The UK can act if the country’s data-protection rules have been violated, Graham said in his blog post.

There’s millions of UK citizens affected, he said. So far our work has been offering assistance to Luxembourg and providing advice to consumers.

Attorneys general in Connecticut, Illinois and Florida said on Friday they would investigate the EBay breach, while New York Attorney General Eric Schneiderman said he had asked the company to provide affected customers with free credit monitoring. BLOOMBERG

More From LiveMint

image beaconimage beaconimage beacon