I almost never use ebay (I've only bought something there once, I think, and looked at a couple of other items), but I've had an account for many years.
Well, ebay finally emailed me yesterday to tell me to update my credentials after their server compromise last week. Thanks, guys, for the many-days-late warning.
Happily, a friend had told me about it the day it became public news, so I'd long-since updated my password.
Ebay gets a D-, at best, on their handling of this.