It's legit. I've changed mine as well as my PayPal pw even though PP wasn't hacked (that we know of). Don't want the NSA cowboys charging a posh lunch on my credit card
2010 Berlingo Multispace HDi 110 with FAP. Persamos green.
I'm cynically wondering if they're testing the ability of a minor SNAFU to work like "viral" advertising, see how fast and wide the response is when they don't actually pester us directly.
Given that Fleabay love to message or email when they are increasing the amount they ping you for, it seems reasonable to assume they'd at least place the ball in the customer's court when it comes to this sort of apparent risk.
They were hacked in February, but they are only requesting the change of password now because they have only just fixed it, well done ebay
Had my ebay account hacked in March. Hackers "bought" 34 smartphones ( about 10 grand worth ) and changed my address in the hope that the sellers would send them without payment. Luckily ebay noticed, suspended my account and cancelled the transactions...:eek: