Slashdot Mirror
Yahoo Triples Estimate of Breached Accounts To 3 Billion (engadget.com)
An anonymous reader shares a report from The Wall Street Journal (Warning: source may be paywalled; alternative source): A massive data breach at Yahoo in 2013 was far more extensive than previously disclosed, affecting all of its 3 billion user accounts, new parent company Verizon Communications Inc. said on Tuesday. The figure, which Verizon said was based on new information, is three times the 1 billion accounts Yahoo said were affected when it first disclosed the breach in December 2016. The new disclosure, four months after Verizon completed its acquisition of Yahoo, shows that executives are still coming to grips with the extent of the security problem in what was already the largest hacking incident in history by number of users.
A spokesman for Oath, the new name of Verizon's Yahoo unit, said the company determined last week that the break-in was much worse than thought, after it received new information from outside the company. He declined to elaborate on the source of that information. Compromised customer information included usernames, passwords, and in some cases telephone numbers and dates of birth, the spokesman said.
A spokesman for Oath, the new name of Verizon's Yahoo unit, said the company determined last week that the break-in was much worse than thought, after it received new information from outside the company. He declined to elaborate on the source of that information. Compromised customer information included usernames, passwords, and in some cases telephone numbers and dates of birth, the spokesman said.
I didn't even know Yahoo still existed, so these 'accounts' must be from last millennium, no?
...under radar. Well played Yahoo/Verizon.
I highly doubt 3B humans have ever signed up an account with Yahoo. Or any other company for that matter, usage statistics are usually highly inflated.
"Yahoo announces leak of personal details for next several generations of humanity".
Moral of story: Do not send your data back in time as a form of offsite backup, no matter how secure you think your future quantum encryption is.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Simply have a story every few weeks on what data remaining hasn't been stolen. I'm guessing at this point it's the null set.
Quick, let's centralize even more of the internet! What could possibly go wrong?
Just curious if this includes AT&T accounts, since AT&T had outsourced their email to Yahoo.
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
The last time they reported a breach (three consecutive times in a row) they forced a password reset. Now I can't even get into one of my accounts because it was the third time I had to reset it in a month, and can't remember the password. Even better, I forgot the reset passwords (Questions, but they are case sensitive so they may as well be passwords. (That you only ever use to reset the main one when you forgot it.....*facepalm*)), and there isn't a registered reset email address, because I was using it as my main email address at the time I set it up years ago. Lesson learned: Take a picture of your reset passwords, and have more than one email address.
Wonder how many more people will end up in the same boat as me this time? A better question would be how many times does Yahoo have to screw up before they loose all of their users? (Their IM is effectively a ghost town now due to the changed protocol making it incompatible with Pidgin, and nobody googles something on Yahoo.)
I highly doubt 3B humans have ever signed up an account with Yahoo.
They said 3B accounts, not 3B people. Nobody is claiming that these are unique individuals.
As long as there are no criminal charges brought and time served this will continue to be a race to number one data dumper.
At least it can't get any worse.
Verizon should have done their due diligence on this. They probably could have gotten their $1 billion discount instead of paying $4.48 billion for Yahoo!
Got. Ripped. Off.
Here's the source of the WSJ's reporting: https://www.oath.com/press/yah... I have no idea why the WSJ is hiding that story behind a paywall if it's freely accessible on Oath's blog.
I have to hand it to the Slashdot commenters who suggested in the past that the breach would be gradually revealed to be ever bigger in scope. I imagine it'll later come out that they knew all of its accounts were breached, before the sale to Verizon, and withheld that info so they'd be bought out for a larger sum. It wouldn't surprise me if somewhere in all the Yahoo data were credentials that could've been used to hack into other, non-Yahoo computer systems, and those hacks may never be tied to this breach.
Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
I mean, gmail has just over a billion I think. Surely most of these yahoo email addresses are abandoned.
My beliefs do not require that you agree with them.
I highly doubt 3B humans have ever signed up an account with Yahoo.
They said 3B accounts, not 3B people. Nobody is claiming that these are unique individuals.
I confess that I had 2 Yahoo accounts for a while, and slazzy confessed that he had 100. So the real number is at best 2,999,999,899 people.
lucm, indeed.
Its a company that can't compete with Google, so it was bought out by intelligence agencies to be used as a scapegoat to build up the public's tolerance towards Google and Facebook's much much worse data collection that they in turn can legally purchase for cheep and therefore, no warrant needed.
Quick, let's centralize even more of the internet! What could possibly go wrong?
"Put all your eggs in one basket, and then watch that basket"
- Mark Twain
The problem we have is that the basket watchers suck because they were hired based on their gender and race rather than because they were the best available.
lucm, indeed.
Thank Yahoo. During that lapse of time, did all of your CEOs sell off stock and make millions too like Equifuck?
Your math still failed, unless slazzy is your bot.
...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
I lost access to an account after a scammer took it over. It this database out in the wild or on the dark web? I'd even pay a nominal fee to get it back. I've waited on hold for 9+ hours with yahoo only to be hung up on.
Those guys from Shaker Hts are all trouble makers,
and don't get me started on that Tim Huntley guy.
SHEESH! Nothin but trouble.
Lemme guess - you're a female African-American?
F***!