Only 1200 were posted - which doesn't mean there were only 1200 accounts compromised.
Given the way the messages were posted there is no logical reason to assume any limitations on the number of accounts. Based on eBay statements there were several scripts which were logging into a compromised account and posting that account's data. That takes some time, much more time than posting a list of names in fewer messages from one account. Only about 1200 were posted because that's all that the 90 minutes or so allowed.
The names and contact information were correct, matching the user ids. The messages were logged from the compromised ids. They did not say that the cc info was fake, but only that they thought it did not come from eBay's files.
No actual fraud was in evidence nor alleged. In my opinion eBay called him a fraudster simply to leave the impression that this was just a fake attempt, without actually saying so.
Slashdot Mirror
Given the way the messages were posted there is no logical reason to assume any limitations on the number of accounts. Based on eBay statements there were several scripts which were logging into a compromised account and posting that account's data. That takes some time, much more time than posting a list of names in fewer messages from one account. Only about 1200 were posted because that's all that the 90 minutes or so allowed.
The names and contact information were correct, matching the user ids. The messages were logged from the compromised ids. They did not say that the cc info was fake, but only that they thought it did not come from eBay's files.
No actual fraud was in evidence nor alleged. In my opinion eBay called him a fraudster simply to leave the impression that this was just a fake attempt, without actually saying so.