Latest
Recommended
Published: Mon, October 09, 2017
Culture | By Antonia Gonzales

Senate panel to hold hearing on Yahoo, Equifax breaches

Senate panel to hold hearing on Yahoo, Equifax breaches

Noting that it continues to work with law enforcement authorities regarding the breach, the company added that the 2013 incident "did not include passwords in clear text, payment card data, or bank account information".

Three billion Yahoo accounts - that's every account that existed at the time of the hacking - are confirmed to have had been compromised by the data breach. It said the data stolen may have included names, email addresses, telephone numbers, date of birth and security questions and answers. "Yahoo also invalidated unencrypted security questions and answers so they can not be used to access an account", Yahoo said on Tuesday.

The company announced Tuesday that all 3 billion of its accounts were, in fact, affected at that time-leaving additional billions of user accounts vulnerable in the interim.

It is the largest breach in history, with Yahoo now alerting users whose accounts were previously thought to be uncompromised.

Yahoo buried the stat in a recent update to its Account Security Update page. Yahoo was acquired by Verizon Communications four months ago.

Verizon said Tuesday that it has since received new intelligence and new forensic information.

The latest announcement multiplies what was already the largest data breach in history, and will nearly certainly mean more litigation for both Yahoo and Verizon.

Verizon initially engaged Yahoo on an acquisition last summer, but negotiated to shave off $350 million from the buyout after Yahoo revealed details of the massive breach in December 2016.

Jay Kaplan, CEO of the cybersecurity company Synack and a former senior analyst with the U.S. National Security Agency, had even stronger words for such security lapses.

Like this: