Pro‑Iran Hackers Claim $200 Million‑Per‑Day DDoS Attack on eBay

Why It Matters

The eBay outage illustrates how state‑linked cyber actors can weaponize DDoS attacks to inflict multi‑hundred‑million‑dollar losses on ecommerce giants, threatening the stability of digital commerce ecosystems. As online marketplaces become critical infrastructure for global trade, any prolonged disruption can ripple through supply chains, affect small businesses, and shake consumer trust. Furthermore, the public claims of coordinated attacks on multiple high‑profile platforms signal an escalation in the cyber threat landscape. Companies that previously considered DDoS a nuisance now face a strategic adversary capable of leveraging political motivations to extract financial or geopolitical concessions, prompting a reassessment of risk models across the sector.

Key Takeaways

• eBay experienced a near‑48‑hour outage after a DDoS attack claimed by the Islamic Cyber Resistance in Iraq – 313 Team.
• Analysts estimate the disruption cost eBay up to $200 million per day in lost transactions.
• The group also announced a parallel attack on Spotify, confirming widespread service problems.
• Threats were issued toward additional U.S. tech firms, with past claims of hits on Microsoft, Amazon, Dropbox and X.
• eBay is reportedly partnering with cybersecurity firms to deploy AI‑driven mitigation tools.

Pulse Analysis

The eBay incident is a wake‑up call for the ecommerce industry, which has long treated DDoS as a nuisance rather than a strategic weapon. Historically, large‑scale DDoS attacks have been used to protest or extort, but the explicit financial framing—"you are losing money by the minute"—suggests a shift toward profit‑driven disruption. This aligns with a broader trend where nation‑state proxies leverage cyber‑crime for geopolitical leverage, blurring the line between hacktivism and state‑sponsored sabotage.

For eBay and its peers, the immediate priority is technical resilience, but the longer‑term challenge lies in governance and public perception. Retailers must demonstrate that they can protect both merchant and consumer data while maintaining uninterrupted service. Investing in edge‑computing DDoS scrubbing, real‑time traffic analytics, and diversified content delivery networks will become non‑negotiable. Moreover, the industry may see a rise in cyber‑insurance premiums as insurers recalibrate risk models to account for politically motivated attacks that can generate daily losses in the hundreds of millions.

Regulators are likely to respond with tighter reporting requirements for service outages that exceed certain thresholds, mirroring financial market rules for operational risk disclosures. If eBay’s losses are confirmed, the incident could trigger a wave of shareholder inquiries and possibly class‑action suits from sellers who missed revenue. In that environment, proactive communication—detailing mitigation steps and timelines—will be as critical as the technical fixes themselves. The next few weeks will reveal whether eBay can restore confidence or whether the 313 Team’s threats will catalyze a broader shift toward more hardened, perhaps even fragmented, ecommerce ecosystems.