Michela Menting, cybersecurity director at technology market experts ABI Research has suggested that hackers gained eBay credentials through "social engineering," a type of psychological manipulation to get people to divulge confidential information.
Menting said: "Finally I think their timely public announcement - two weeks after discovery - helps to reassure not only public opinion, but also their own brand reputation.
"Transparency when dealing with incident response for an event that has affected customers, in this case millions, is highly commendable - it means that eBay takes security seriously."
More top news
Francois Hollande has urged British MPs to support David Cameron's plan to launch airstrikes against so-called Islamic State in Syria.
Teenage twin brothers were found guilty today of murdering a 'quiet, humble' father who dared to intervene in a robbery in north London.
Police have warned Black Friday web shoppers to change their passwords after a man was arrested for alleged cyber offences against Tesco.