I haven't been asked by Fleabay to change my password, but I've been getting notices from them stating that I requested to change my password even though I haven't. I've been getting them on and off for probably a year now, sometimes 2 or 3 a day. Always a different IP, mostly from the UK. At first I thought it may have been phishing, but after sending copies to spoof@ebay.com, I never received a reply so I believe them to be legit from E-bay. I've contacted them about it and again, never received a reply
. So far I haven't had any issues with either my E-bay or Pay-Pal accounts, but I'll change both passwords just to be safe in light of this recent attack.