Slashdot Mirror


Yahoo Confirms Massive Data Breach, 500 Million Users Impacted [Updated] (recode.net)

Update: 09/22 18:47 GMT by M :Yahoo has confirmed the data breach, adding that about 500 million users are impacted. Yahoo said "a copy of certain user account information was stolen from the company's network in late 2014 by what it believes is a state-sponsored actor." As Business Insider reports, this could be the largest data breach of all time. In a blog post, the company said:Yahoo is notifying potentially affected users and has taken steps to secure their accounts. These steps include invalidating unencrypted security questions and answers so that they cannot be used to access an account and asking potentially affected users to change their passwords. Yahoo is also recommending that users who haven't changed their passwords since 2014 do so. The Intercept reporter Sam Biddle commented, "It took Yahoo two years to announce that info on half a billion user accounts was stolen." Amid its talks with Verizon for a possible acquisition -- which did happen -- Yahoo knew about the attack, but didn't inform Verizon about it, Business Insider reports. Original story, from earlier today, follows.

Last month, it was reported that a hacker was selling account details of at least 200 million Yahoo users. The company's service had apparently been hacked, putting several hundred million users accounts at risk. Since then Yahoo has remained tight-lipped on the matter, but that could change very soon. Kara Swisher of Recode is reporting that Yahoo is poised to confirm that massive data breach of its service. From the report: While sources were unspecific about the extent of the incursion, since there is the likelihood of government investigations and legal action related to the breach, they noted that it is widespread and serious. Earlier this summer, Yahoo said it was investigating a data breach in which hackers claimed to have access to 200 million user accounts and was selling them online. "It's as bad as that," said one source. "Worse, really." The announcement, which is expected to come this week, also possible larger implications on the $4.8 billion sale of Yahoo's core business -- which is at the core of this hack -- to Verizon. The scale of the liability could be large and bring untold headaches to the new owners. Shareholders are likely to worry that it could lead to an adjustment in the price of the transaction.

5 of 169 comments (clear)

  1. They've already tacitly admitted the breach by jenningsthecat · · Score: 3, Interesting

    Just recently I was prompted to change passwords on my two Yahoo accounts. I've had both for about 10 years and this is the first time I've seen this, so yeah, they're visibly doing something about it. Unfortunately, they waited an unacceptably long time, and they still weren't forcing the password change. That's not surprising, given that it's Yahoo, but it's still kinda disappointing.

    --
    'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
  2. Re:Yahoo has users? by Anonymous Coward · · Score: 3, Interesting

    If AT&T is part of the breach, it won't do any good changing your AT&T password as the old password will still work when accessed through Yahoo. I brought that problem up about 5 years ago, don't know if it was fixed yet and doubt if it was.

  3. Re:Which 3rd worlders did it THIS time?? by Anonymous Coward · · Score: 0, Interesting

    Why is this modded down?? I'm with Trump-- I've had enough of this political correctness bullshit. I'm guessing you're upset because I singled out people from third world countries, even though that is where almost ALL the hackers reside? (not including Russia and China). When one speaks the truth now-a-days, it is considered a despicable act if it is about non-white people.

  4. Re:Yahoo has users? by ShaunC · · Score: 4, Interesting

    I'm very inclined to believe that yes, anyone whose mail is hosted by Yahoo is part of the breach. That includes the bells (ATT, SBC, PacBell, BellSouth, etc). Anecdotally I'm confident that the address books and recent contacts of Yahoo Mail users have been compromised for years through some type of exploit. There are spam campaigns that specifically target these accounts in this way, forging the "From" address as someone you have recently communicated with.

    --
    Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
  5. Flickr is still better by SuperKendall · · Score: 1, Interesting

    Flickr still has a vibrant community. Some people left over the UI range, but where would they really go? 500px? Don't make me laugh.

    I still prefer the UI Flickr has over any other site - for serious photography.

    Yahoo didn't kill off Flickr - and they are larger than they ever have been.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley