Claims of an eBay DDoS attack are circulating after hacktivist group 313 Team said it targeted the online marketplace during a user-visible outage on Sunday, April 26, 2026.
The disruption affected core parts of the eBay experience. Users reported problems with search, checkout, login, carts, account pages, tracking, and the mobile app. Some users also reported seeing an error message that said, “Homepage is down, but the rest of eBay is fine.”
eBay has not publicly confirmed that the disruption was caused by a DDoS attack. There is also no confirmed evidence that eBay’s systems were breached, that customer data was accessed, or that the incident involved ransomware, malware, or account compromise. At this stage, the public evidence points to a service disruption and an unverified DDoS claim, not a verified data breach.
The outage reports began appearing on April 26, 2026, with users describing different problems depending on what part of eBay they were trying to use. Some said search returned no results. Others said they could not sign in, access their cart, pay for items, load pages, view order details, or use the app normally.
ValueAddedResource, which tracks marketplace issues closely, reported widespread eBay server errors affecting search, login, checkout, descriptions, and other features. StatusGator also detected a possible eBay outage and listed search problems, slow pages, sign-in issues, error messages, app problems, and checkout failures among the top reported issues.
eBay’s own system status page showed its core services as healthy when checked, which is worth noting because the user reports were still visible elsewhere. eBay’s technical issues help page tells users to check that status board when site features are slow or unavailable, but public outage reports do not always line up cleanly with official status pages.
313 Team claimed responsibility for a DDoS attack targeting eBay, but the claim has not been publicly verified by eBay or by a mitigation provider with direct visibility into the traffic. No packet data, infrastructure details, mitigation report, or technical timeline has been made public tying the outage to 313 Team.
That does not mean the claim should be ignored. 313 Team has appeared in recent reporting around hacktivist activity and denial-of-service claims, including claims tied to other online services. We recently reported that Bluesky confirmed a DDoS attack affecting its platform, while 313 Team took credit for that disruption without Bluesky publicly attributing the attack to the group.
The clean way to frame the eBay situation is simple: 313 Team says it carried out a DDoS attack against eBay, users reported real service problems, and eBay has not publicly confirmed the cause.
There is currently no public confirmation that the eBay outage involved unauthorized access to customer accounts, seller records, payment information, messages, order history, or internal systems.
That distinction matters. A DDoS attack, if confirmed, is usually an availability attack. It can make a website, app, or service difficult to use by overwhelming targeted systems or related infrastructure. It does not automatically mean that attackers entered internal systems or stole data.
Users should also avoid treating outage messages as proof of compromise. Error pages, failed search results, broken checkout flows, and app failures can happen during a DDoS attack, but they can also happen during backend failures, traffic routing problems, deployment issues, third-party service problems, database errors, or content delivery failures.
An eBay outage is not just an inconvenience for casual shoppers. eBay is a major global marketplace with 135 million active buyers worldwide and about 2.5 billion live listings, according to the company’s investor materials. eBay also reported $21.2 billion in gross merchandise volume and $2.96 billion in revenue for the fourth quarter of 2025.
That scale makes availability important. If search stops working, sellers can lose visibility. If checkout fails, buyers may miss purchases or auctions. If login, carts, tracking, or payment pages break, users may not know whether an order went through. For sellers, even a temporary disruption can affect listings, bids, promoted placements, shipping workflows, and customer messages.
For auction sellers, timing is especially sensitive. A failure during the final minutes of an auction can change the final price if buyers cannot search, bid, sign in, or pay. For fixed-price sellers, broken search and checkout can mean missed sales during the disruption window.
Buyers who tried to make a purchase during the outage should check their eBay purchase history, email receipts, and payment account before trying the same transaction again. Repeating checkout attempts during a partial outage can create confusion, especially if a payment appears before the matching eBay order confirmation arrives.
Sellers should preserve records for affected transactions, including auction end times, failed checkout messages, buyer complaints, shipping-label errors, and any order or payment problems that happened during the outage window. Sellers using third-party listing, shipping, inventory, or analytics tools should also check whether those integrations resumed normally.
Basic account security steps are still sensible, even without evidence of a breach. Users should enable two-factor authentication, avoid reused passwords, review recent account activity, and be cautious of emails or messages claiming to offer refunds, credits, compensation, or urgent account fixes after the outage.
The eBay outage was real enough for users to notice and report, and 313 Team’s DDoS claim is relevant because it was made during the disruption. What has not been proven is the cause.
Until eBay confirms a DDoS attack, a mitigation provider publishes technical details, or another authoritative source provides evidence, the safest wording is that eBay experienced a user-visible service disruption on April 26, 2026, and hacktivist group 313 Team claimed responsibility. There is no confirmed evidence of an eBay data breach, ransomware attack, malware incident, or customer data exposure tied to the outage.
Sean Doyle
Sean is a tech author and security researcher with more than 20 years of experience in cybersecurity, privacy, malware analysis, analytics, and online marketing. He focuses on clear reporting, deep technical investigation, and practical guidance that helps readers stay safe in a fast-moving digital landscape. His work continues to appear in respected publications, including articles written for Private Internet Access. Through Botcrawl and his ongoing cybersecurity coverage, Sean provides trusted insights on data breaches, malware threats, and online safety for individuals and businesses worldwide.



