The firm took several weeks to notice the intrusion and users are angry the company delayed a further two weeks after confirming data had been accessed, before notifying anyone. This meant attackers had two months to sell the data on underground forums.
eBay also came under criticism for being slow to introduce mechanisms to force users to reset passwords.
eBay claims it had to take time to investigate the nature of the breach before making a public announcement.
The breach demonstrates the importance of preparing for security attacks. Privacy lawyer Stewart Room tweeted: "Lesson for business: scenario plan so you look slick when hit."
Information commissioner, Christopher Graham added: "The message for business is you've got to be better at security, and you've got to be better with personal data."
eBay has said they are working hard to fix the issues and that protecting users' details is their first priority.
Return to internet news headlines
View Internet News Archive