` First eBay got hacked, then it took an age to place a notice about that on its front page. Perhaps the ineffectiveness of that delayed tactic explains why it is now pursuing yet another tactic: forcing any users who have not changed their password to do so.
eBay announced the latest better-late-than-never move on its noticeboard:
Over the past two days we have been contacting all eBay users asking them to change their passwords. If you haven't yet changed your password, at some point you will be prompted to do so when you login or before you complete a transaction. If you changed your password on May 21 or later, we do not need you to take any additional action at this time.
Timing these activities doesn't seem to be eBay's strong suit: just as it couldn't guarantee when users would receive emails about the issue (mine only showed up yesterday), it only says this change will happen "at some point". The sooner, the better.