Michela Menting, cybersecurity director at technology market experts ABI Research has suggested that hackers gained eBay credentials through "social engineering," a type of psychological manipulation to get people to divulge confidential information.
Menting said: "Finally I think their timely public announcement - two weeks after discovery - helps to reassure not only public opinion, but also their own brand reputation.
"Transparency when dealing with incident response for an event that has affected customers, in this case millions, is highly commendable - it means that eBay takes security seriously."
More top news
Two students and their climbing instructor are feared dead after an avalanche hit a school party in Japan.
The US has strongly condemned Russia's treatment of protesters after the largest anti-government protests in years swept the country.
Prosecutors in South Korea are seeking a warrant to arrest former president Park Geun-hye on corruption allegations.