Hackers quietly broke into eBay two months ago and stole a database full of user information, the online auction site revealed Wednesday.
Criminals now have possession of eBay (EBAY, Fortune 500) customer names, account passwords, email addresses, physical addresses, phone numbers and birth dates.
The company said the passwords were encrypted, but there's no telling when or if the hackers can decrypt them. As a precaution, eBay is resetting everyone's passwords.
The company isn't saying how many of its 148 million active accounts were affected -- or even how many customers had information stored in that database. But an eBay spokeswoman said the hack impacted "a large number of accounts."
Related story: What China's hacker spies were doing
EBay's subsidiary, PayPal, said it was untouched by the data breach. PayPal data, which is sensitive because it includes payment information, is kept on a separate network.