Mid-morning I received a text from the bank about a suspicious set of purchases on my credit card from my ebay account. I rang them back, and they cancelled three transactions of escalating value – a classic fraudster tactic – made from ebay today. I have two-factor authentication enabled, so to access ebay they must have hacked my gmail as well as they didn’t sent texts to my phone when buying, presumably counting on someone not checking their emails as often. Password changed on my email, and ebay. Ebay themselves don’t want to know it would appear as that is all they suggest doing. Bank are issuing new credit card and I’ve stopped all ebay transactions with them until I feel everything is safe again. Anything else I should be doing from those with a bit more knowledge of this.