Michela Menting, cybersecurity director at technology market experts ABI Research has suggested that hackers gained eBay credentials through "social engineering," a type of psychological manipulation to get people to divulge confidential information.
Menting said: "Finally I think their timely public announcement - two weeks after discovery - helps to reassure not only public opinion, but also their own brand reputation.
"Transparency when dealing with incident response for an event that has affected customers, in this case millions, is highly commendable - it means that eBay takes security seriously."
More top news
Belgium police have arrested four people suspected of planning terrorist attacks.
The first trailer for Disney's Beauty and the Beast has become the most-viewed such clip of all time with 91.8m views in 24 hours.
Dame Barbara Windsor dismisses criticism that the BBC acted "as the cheerleader" in Eastenders suicide storyline.