The Ebay 2022 Breach Put 296,252 Stolen Email and Phone Records Online

HEROIC analysts tracked a significant data breach tied to Ebay 2022 that surfaced in April 2022, when a file containing the personal information of approximately 296,252 users was shared on a popular hacking forum. The exposed records included email addresses, phone numbers, usernames, and full names. No passwords were included in this dump, but the combination of personally identifiable information makes these records highly usable for targeted scams, phishing attacks, and account takeovers on other platforms. The breach has continued to circulate in the years since, appearing in new contexts and being bundled with other data to increase its value to attackers.

Why This Is Dangerous

eBay is one of the most recognized online marketplaces in the world, which means the people in this breach are likely active online buyers and sellers who transact money regularly. An attacker with a victims full name, email address, and phone number can craft highly convincing phishing messages that appear to come from eBay directly. They can also use this informaton to attempt account recovery on eBay and other sites where the victim used the same email. Phone numbers open the door to SIM swapping, a technique where attackers convince a mobile carrier to transfer a victims number to a SIM card they control, giving access to any account using SMS-based two-factor authentication. The scale of 296,252 records makes this a particularly rich source for bulk phishing campaigns.

What Was Exposed

• Email addresses
• Phone numbers
• Usernames (eBay account handles)
• First and last names
• 296,252 total records from United States users

Why This Matters

Breaches involving large consumer platforms like eBay are particularly impactful because they affect ordinary people who shop online, not just technical users. The data from this breach has a long shelf life. Even though the initial leak occured in 2022, it has continued to be referenced and redistributed on hacking forums and Telegram channels. Older breach data remains useful to attackers because people rarely change their email address or phone number, and those pieces of informaton stay valid for years. If your information appeared in this breach, you have had an elevated risk of targeted phishing and account fraud for the past several years.

How eBay Database Breaches Work

Large platforms like eBay store vast amounts of user data in centralized databases. When an attacker gains unauthorized access, whether through a web application vulnerability, a compromised internal account, or a third-party supplier, they can export that data in bulk. The resulting file contains every user record in the targeted table. Once on a hacking forum, it is available to anyone who knows where to look. Breaches like this one often resurface repeatedly as the data gets repackaged and sold to new buyers who use it for credential stuffing, phishing, or fraud. The Ebay 2022 breach is a textbook example of this cycle.

Check If You Are Affected

If you have an eBay account and used it before or during 2022, there is a real chance your information was part of this breach. HEROIC's breach intelligence database contains over 400 billion records from thousands of breach sources. Our free scanner lets you search your email address to see exactly what has been found across all known breach sources. You do not need to guess whether your data is out there. Check for free at HEROIC's free breach scanner and see the full picture of your exposure.