Slashdot Mirror


Some Within Yahoo Knew of Massive Breach in 2014 (usatoday.com)

Some within Yahoo knew of a massive data breach that compromised its network when it occurred in 2014, not in late September, when it was first disclosed. From a report on USA Today: An independent committee of Yahoo's board, which launched an internal probe in August to learn more about the state-sponsored attack that affected data belonging to at least 500 million members, discovered that staff knew of the attack two years ago. "The company had identified that a state-sponsored actor had access to the company's network in late 2014," the company said In a filing with Securities and Exchange Commission.

30 comments

  1. State-sponsored actor by Anonymous Coward · · Score: 0

    Let me guess, it's gonna be Russkis again, isn't it?

    1. Re:State-sponsored actor by Big+Hairy+Ian · · Score: 1

      Let me guess, it's gonna be Russkis again, isn't it?

      Nah I blame Mickey Rooney

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

  2. Ethics by Anonymous Coward · · Score: 0

    How is it ethical to continue offering a service that you know is compromised?

    1. Re:Ethics by justthinkit · · Score: 1

      The public knew about it on or before January 30, 2014.

      --
      I come here for the love
  3. Marissa for jail 2016 by Anonymous Coward · · Score: 0

    She can join Hillary.

  4. Bunch of Yahoos by Oswald+McWeany · · Score: 2

    Yahoo
        [yah-hoo, yey-, yah-hoo]
    Spell Syllables
    noun, plural Yahoos.
    1.
    (in Swift's Gulliver's Travels) one of a race of brutes, having the form and all the vices of humans, who are subject to the Houyhnhnms.
    2.
    (lowercase) an uncultivated or boorish person; lout; philistine; yokel.
    3.
    (lowercase) a coarse or brutish person.

    Accurate.

    --
    "That's the way to do it" - Punch
    1. Re:Bunch of Yahoos by Anonymous Coward · · Score: 0

      Or, you know, a vocal expression akin to a cheer. That's why their name is YAHOO! not Yahoo.

      And when GMAIL can accept 'right click, open message in new tab' I'll use it more often. In the meantime Yahoo! mail will. They even took it away for awhile & responded to backlash so it's back.

      Sure they're an 'older original' web 1.0 company but so what, we're going to stop using The Wheel or Baseball Caps because newer things have been invented since then?

    2. Re:Bunch of Yahoos by Anonymous Coward · · Score: 0

      And when GMAIL can accept 'right click, open message in new tab' I'll use it more often.

      Try ctrl+click.

  5. Yahoo! applicants by Anonymous Coward · · Score: 0

    With the takeover of Yahoo! by Verizon, their people are trying to jump ship.

    When they apply to us, any resume with Yahoo! on it goes to /dev/null. The reason being they don't have the skills.

  6. Re: I'll tell you what got breached by Anonymous Coward · · Score: 0

    You should bring your own vaseline, idiot. The only thing drained in this country is honor and intelligence. You are evidence of this.

  7. Re: I'll tell you what got breached by Anonymous Coward · · Score: 0

    TRUMP! HAHAHA!!!

  8. Re:Will Obumbles pardon Crooked Liar Hillary! by Anonymous Coward · · Score: 0

    You have to be convicted of something in order to need a pardon, genius.

  9. Disinformation by Vlad_the_Inhaler · · Score: 2

    When Yahoo initially claimed they were breached by a "state sponsored attack", my thoughts were: well - they would say that. Others - better informed - agreed. Now that claim is being spun as a "given", is there really any proof at all of that?
    The first I heard about it was at the start of August. That appears to be when the "internal probe" was launched, it took them a further 6 weeks to go public.

    --
    Mielipiteet omiani - Opinions personal, facts suspect.
  10. Re: Will Obumbles pardon Crooked Liar Hillary! by Anonymous Coward · · Score: 0

    No, Ford pardoned Nixon.

  11. Yes, we know this. by freeze128 · · Score: 2

    We already know this. That's what the whole story in late September was about: Yahoo was hacked and that information was kept from its customers for 2 years. Of course someone inside Yahoo knew about it.

    Maybe this article is just to help stem the mass suicide from learning that Trump won the election.

    1. Re:Yes, we know this. by Ol+Olsoc · · Score: 2

      We already know this. That's what the whole story in late September was about: Yahoo was hacked and that information was kept from its customers for 2 years. Of course someone inside Yahoo knew about it.

      The very odd thing that I'm having a problem with is I knew of the breach. At the time, I belonged to several Yahoo groups. A lot of spam and spoofed posts started showing up. Then Yahoo sent out posts telling people to change their passwords. While no one mentioned "State actors", it was pretty obvious that a big hack had just happened.

      Fortunately, I only used my Yahoo email to access the groups, not for anything else. Kinda like there was nothing but the one program I needed Windows for on my W10 machine. So even if hacked in the case of Yahoo, or purposefully telemetered, like Windows 10, there would be as little damage as possible.

      But two years later, its hard to figure out what was supposedly kept secret from us.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  12. I'm only surprised they bothered admitting it. by Narcocide · · Score: 2

    It was transparently obvious to the rest of us that Yahoo had been breached long before 2014. Empirical evidence of the sheer rate and volume of account compromises (especially re-compromises) over the years compared to other similar services left little else as a plausible explanation. The worst possible news here for Yahoo is that they might be telling the truth and it really took them all the way until 2014 to notice themselves.

  13. State-sponsored most likely the US government by Anonymous Coward · · Score: 1

    Wow, it sounds like the state-sponsored attack must have been the US government.

    Can you imagine Yahoo employees keeping their mouths shut for that long if it was a Russian/Chinese/Indian/Iranian-sponsored attack? Or for that matter, even if the evidence wasn't solid, engage in wild speculation? See the recent allegation of Russian support for Trump broadcast as fact despite the lack of any hard evidence.

    We know from the Snowden revelations that in addition to secret courts rubber stamping secret requests; plus active cooperation by most IT companies in creating automated systems to deal with the volumes of requests; that the NSA were nonetheless actively and covertly attacking major IT companies such that even Google/Yahoo/Facebook etc have all started encrypting internal network links over the past few years.

  14. Twist ending! by Narcocide · · Score: 1

    The state that sponsored the attack was their own.

  15. ROUGE ENGINEER! by michaelcole · · Score: 1

    ROUGE ENGINEER strikes again!

    1. Re:ROUGE ENGINEER! by Anonymous Coward · · Score: 0

      Doesn't everything get blamed on the Red Menace these days?

  16. Re: I'll tell you what got breached by Anonymous Coward · · Score: 0

    Er,when did honour or intelligence last have a foothold in America ?
    The last "honourable" and intelligent Americans I met was in the 1960's,test pilots here in the UK,many of whom vanished over Vietnam etc...
    Since then I have only met two others,one who spends more time in Europe rather than America and the other has since died of old age,and despair at what America had become...

  17. Re:Hahaha quit cryin loser! by haruchai · · Score: 2

    "Man who broke England's bank" - you don't have a clue. Read & learn

    http://www.investopedia.com/as...

    --
    Pain is merely failure leaving the body
  18. Re:Will Obumbles pardon Crooked Liar Hillary! by haruchai · · Score: 1

    Yes, She Can

    "nor shall be compelled in any criminal case to be a witness against himsel"

    --
    Pain is merely failure leaving the body
  19. "state-sponored" smoke screen by Anonymous Coward · · Score: 0

    https://www.schneier.com/blog/archives/2016/09/the_hacking_of_.html

    Yahoo can say "state-sponsored" till its blue in the face; doesn't make it true.