[blockquote]I wouldn't be surprised if the hack came from ebay.
Truer statement then you may think.
Ten years ago I found some one had used my paypal account to buy close to 5 grand worth of electronics off of ebay in one day. The shipping address was changed to California. It took months, and a lot of fighting, but the truth finely came out that the "hacker" worked at paypal, and mine was one of many accounts that was "sold" by this person. Needless to say I closed my account and will never open another with them after all the hassle of cleaning up this mess. Now for internet purchases I use one of those load as you go Visa debit cards that you can pick up at Walgreens, Walmart, and most banks. It has no connection what so ever to my bank account so there is no way to charge more then what is on the card, and I only load it when I win an auction or want to make an online purchase. It may cost a few bucks in charges over a year, but for me it's worth it to keep my funds safe.