Yahoo just said every single account was affected by 2013 attack — 3 billion in all

Yahoo just said every single account was affected by 2013 attack — 3 billion in all

Yahoo is now part of a Verizon subsidiary named Oath.

By Todd Haselton Published October 3, 2017 10 Mins Ago 

Yahoo, now part of Oath, said that every single Yahoo account was affected by a data breach that took place in 2013.

Yahoo buried the stat in a recent update to its Account Security Update page. "Based on an analysis of the information with the assistance of outside forensic experts, Yahoo has determined that all accounts that existed at the time of the August 2013 theft were likely affected," Yahoo's page says.

"It is important to note that, in connection with Yahoo's December 2016 announcement of the August 2013 theft, Yahoo took action to protect all accounts. The company required all users who had not changed their passwords since the time of the theft to do so. Yahoo also invalidated unencrypted security questions and answers so they cannot be used to access an account," Yahoo added.

Yahoo said that the company received new intelligence after it was acquired by AOL and that forensic experts discovered the attack was larger than originally thought. Yahoo will begin alerting accounts that weren't previously notified of the attack.

In 2013, a breach allowed attackers to steal email addresses, passwords, birth dates, telephone numbers and more. Passwords stolen by the attack were still encrypted.

Verizon finished its acquisition of Yahoo in June and is folding it, with AOL, under a new subsidiary named Oath.


Comments

Popular posts from this blog

Report: World’s 1st remote brain surgery via 5G network performed in China

Visualizing The Power Of The World's Supercomputers

BMW traps alleged thief by remotely locking him in car