The Biggest & Best Portal to the Professional Property, Workplace and Built Environment Community

Sunday, 25 February

Yahoo Cyber Breach Was Bigger

Yahoo has announced (week ending Oct 6) that it is providing notice to additional user accounts affected by an August 2013 data theft previously disclosed by the company on December 14, 2016.

At that time, Yahoo disclosed that more than one billion of the approximately three billion accounts existing in 2013 had likely been affected. In 2016, Yahoo took action to protect all accounts, including directly notifying users identified at the time, requiring password changes and invalidating unencrypted security questions and answers so that they could not be used to access an account. Yahoo also notified users via a notice on its website.

Subsequent to Yahoo's acquisition by Verizon and during integration, the company recently obtained new intelligence and now believes, following an investigation with the assistance of outside forensic experts, that all Yahoo user accounts were affected by the August 2013 theft.

While this is not a new security issue, Yahoo is sending email notifications to the additional affected user accounts.

The investigation indicates that the user account information that was stolen did not include passwords in clear text, payment card data or bank account information.

The company is continuing to work closely with law enforcement.

"Verizon is committed to the highest standards of accountability and transparency and we proactively work to ensure the safety and security of our users and networks in an evolving landscape of online threats," said Chandra McMahon, Chief Information Security Officer, Verizon. "Our investment in Yahoo is allowing that team to continue to take significant steps to enhance their security, as well as benefit from Verizon's experience and resources."

Additional information regarding this issue is available on the Yahoo 2013 Account Security Update FAQs page, https://yahoo.com/security-update.

Yahoo now operates as part of Oath, a subsidiary of Verizon

 

Article written by Brian Shillibeer

Share



Related Articles

Uber And The Cyber Nightmare Ride

In an unprecedented move, the National Cyber Security Centre has commented specifically on the Uber data breach - with a coded reference to the fact that Uber tried to...

 Read Full Article
If Dolly Can Be Hacked, What About The Hand Dryer?

  Connected toys with Bluetooth, wi-fi and mobile apps may seem like the perfect gift for Christmas. But Which? has found that, without appropriate safety...

 Read Full Article
Do You Do Data? EU GDPR to Enter British Law

In a statement of intent (made on Monday 7), the government has committed to updating and strengthening data protection laws through a new Data Protection Bill. The...

 Read Full Article
What's Up Docs?

A Google spokesperson has told ThisWeekinFM: “We realise people are concerned about their Google accounts and we're now able to give a fuller explanation after...

 Read Full Article
Get Safe Online Week 2015

The UK public has been left feeling vulnerable following an increase in highly personalised cybercrimes according to Get Safe Online, the joint public private internet...

 Read Full Article
Count-down to Disaster - NCA Opens Two Week Window to Prevent UK-wide £Millions Fraud

The UK's national Crime Agency (NCA) yesterday announced a two week opportunity to reduce a threat from a powerful new computer attack. It urged businesses and...

 Read Full Article
Top 10 IT Security Predictions for 2018

As the headline implies...in fact, blatantly states, we have the top ten IT security predictions - courtesy of Ian Kilpatrick.   1. Security blossoms in the...

 Read Full Article
Andromeda Strained - International Cyber Op Dismantles Botnet

On November 29, the Federal Bureau of Investigation, in close cooperation with the Luneburg Central Criminal Investigation Inspectorate in Germany, Europol’s...

 Read Full Article
McDonalds Security Contractor In 'Remove Your Hijab' Scandal

Thursday evening, November 30, McDonalds Restaurants discovered the hard way that a relationship with a contractor - in this case, employing cheap, untrained security...

 Read Full Article
Appointments In A Changing World

Wilson James has amalgamated its City of London and Southern business regions to create a £65m operational ‘powerhouse’ spearheading a targeted...

 Read Full Article