2014 — eBay: Feb–Mar 2014, 145.0M records
Data compromised
Encrypted passwords, names, emails, addresses, DOB
Technical writeup
Feb–Mar 2014. Attackers compromised employee credentials and accessed eBay's corporate network, then exfiltrated customer database. Exposed: encrypted passwords, names, emails, addresses, DOBs. eBay urged users to change passwords. FTC settled charges over false privacy notice and failed security practices.
Root cause
Compromised employee credentials; unauthorized network access.