Consumer Apps · Shopping/Retail · Private litigation
eBay
Headline
eBay's security team once tormented a couple who publicly criticized the company — sending them live spiders, a bloody pig mask, and funeral wreaths, among other things…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
eBay's security team once tormented a couple who publicly criticized the company — sending them live spiders, a bloody pig mask, and funeral wreaths, among other things — in a scandal so severe it generated a federal criminal case AND a 5-YEAR civil lawsuit. That civil case settled days before a jury trial set to begin March 2, 2026; the terms, made public in July 2026, total $55.7 million — $48.7 million in compensation to David and Ina Steiner ($46.15 million of it from eBay, the rest from former executives Devin Wenig, Wendy Jones and Steve Wymer) plus $7 million in charitable contributions. An earlier draft's February 25, 2026 settlement date and next-day change to eBay's risk committee charter were not verified.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Binding arbitration confirmed directly from the current User Agreement (effective June 28, 2026 update): requires a MANDATORY 45-day 'Informal Dispute Resolution' notice period before either party can start arbitration or small-claims court; the current agreement also bars 'buy-for-me agents' and 'LLM-driven bots' (and any end-to-end flow that places orders without human review) from accessing the site without eBay's express permission; a prior amendment took effect Feb. 20, 2026, but this pass did not confirm that the arbitration clause itself was expanded to cover AI-agent disputes — a genuinely novel, AI-era update to a legal terms document not seen elsewhere in this tracker.
Data sharing
Arbitration-demand campaigns reportedly organized by plaintiff firms (named in earlier drafts as Levi & Korsinsky / Labaton Keller Sucharow, 2025-2026; not independently verified this pass) allege eBay shared California users' private information via third-party trackers without consent, seeking statutory damages up to $5,000/violation under California law — same CIPA-driven pixel-tracking pattern seen at Etsy, LinkedIn, Pinterest, and other companies in this tracker.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. PUBLIC COMPANY (EBAY). Service route: c/o General Counsel / Corporate Secretary, San Jose, California — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260 | Not fetched yet | NO (HTML only) |
| Terms of service ebay.com/help/policies/member-behaviour-policies/user-agreement?id=4259 | Not fetched yet | NO (HTML only) |
| Website ebay.com | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
Headquarters on file: California. Provisions of CCPA/CPRA on file:
| Provision | Type | Source |
|---|---|---|
| Right to Deletion Cal. Civ. Code § 1798.105 | hard | source |
| Right to Correction Cal. Civ. Code § 1798.106 | hard | source |
| Right to Know / Access Cal. Civ. Code § 1798.110 | hard | source |
| Right to Limit Use of Sensitive Personal Information Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027 | hard | source |
| Right to Data Portability Cal. Civ. Code § 1798.130(a)(3)(B)(iii) | hard | source |
| Privacy Policy / Privacy Notice Requirements Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011 | hard | source |
| Sensitive Personal Information — Categories Cal. Civ. Code § 1798.140(ae) | hard | source |
| Service Provider and Contractor Contract Requirements Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051 | hard | source |
| Applicability Threshold (2025 CPI-Adjusted) Cal. Civ. Code § 1798.140(d) | threshold | source |
| Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026) Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157 | hard | source |
| Right to Opt Out of Sale or Sharing Cal. Civ. Code §§ 1798.120, 1798.135 | hard | source |
| Sale vs. Sharing Distinction Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah) | hard | source |
| Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted) Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206 | hard | source |
| Notice at Collection Cal. Code Regs. tit. 11, § 7012 | hard | source |
| Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026) Cal. Code Regs. tit. 11, §§ 7120-7124 | hard | source |
| Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16) | hard | source |