474MB eBay Leak Exposes 13M+ Consumer Records Globally

Data Breach Summary

A major data breach involving eBay consumer data has been discovered on darkforums.st, where a threat actor identified as aisdata published a 474MB compressed file in August 2025. The leak includes over 13,307,867 unique records of consumer information from users across multiple countries.

The exposed data contains highly sensitive personal details such as names, email addresses, phone numbers, physical addresses, and full dates of birth. This level of detail poses a serious risk for phishing, fraud, and identity theft.

---

Where and How?

The breach was posted on darkforums.st, a dark web forum frequently used by cybercriminals to share stolen data. According to the forum listing, the leaked dataset contains structured records in plain text or CSV-like format, with the following fields:

• email
• name
• address
• city
• state
• zip
• country
• phone
• date of birth

The leak consists of 13.3 million+ unique lines, with users from various countries included, indicating that this breach likely affects a global user base. While the source is not yet confirmed, the data may have been extracted from third-party platforms or breached eBay-related services.

Company Data Breach History

This is not the first time eBay-related data has been compromised. In December 2024, a breach involving eBay’s logistics partner Hipshipper exposed over 14 million shipping records due to a misconfigured cloud bucket.

While that incident involved shipping data, the August 2025 leak appears more severe, containing a complete consumer profile dataset with sensitive PII fields. If confirmed, this would mark a second major eBay-affiliated breach in less than a year.

---

Further Action:

The affected parties must investigate the origin of this leak, identify the systems involved, and notify impacted users as soon as possible. In addition, a review of third-party vendor access and data retention policies should be conducted to prevent future breaches.

---

Recommendations for Personal Data Protection

How Users Can Protect Their Information

To protect their personal information and accounts from being compromised, users should take the following steps:

• Change their passwords frequently, with a combination of letters, numbers, and symbols.
• Enable two-factor authentication whenever possible.
• Use unique passwords for each account, to prevent attackers from accessing multiple services.
• Be cautious of suspicious emails or text messages — especially ones asking for personal info.
• Monitor financial and e-commerce accounts for any unusual or unauthorized activity.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.