Michela Menting, cybersecurity director at technology market experts ABI Research has suggested that hackers gained eBay credentials through "social engineering," a type of psychological manipulation to get people to divulge confidential information.
Menting said: "Finally I think their timely public announcement - two weeks after discovery - helps to reassure not only public opinion, but also their own brand reputation.
"Transparency when dealing with incident response for an event that has affected customers, in this case millions, is highly commendable - it means that eBay takes security seriously."
More top news
Data-selling companies trade personal addresses and phone numbers for as little as 4p per record, a watchdog has warned.
A bitterly cold airmass covers the UK this weekend.
The emotion of Donald Trump's inauguration was too much for Jessica Starr, who told ITV News: "I'm so sorry... this is not America."