Don't miss

Replay


LATEST SHOWS

EYE ON AFRICA

AU warns 6,000 jihadists could return to Africa

Read more

MEDIAWATCH

Trump's accusers say #MeToo... again

Read more

THE DEBATE

Game Changer? Middle East Diplomacy after Trump's Jerusalem Move

Read more

THE INTERVIEW

Exclusive: Niger's president warns Malian state 'could collapse'

Read more

FOCUS

USA: Voters speak out ahead of high-stakes Alabama Senate race

Read more

TALKING EUROPE

Readying the eurozone for future storms: EU Commissioner Valdis Dombrovskis

Read more

TALKING EUROPE

Russian influence, reforms, corruption: Challenges for Europe's Eastern partners

Read more

THE OBSERVERS

Kidnapped and sold in Libya: Our Observer's story

Read more

ENCORE!

Music show: Son Little, Eminem, N.E.R.D & 'adieu' Johnny Hallyday

Read more

Business

Yahoo says all 3 billion accounts hacked in 2013 data theft

© Justin Sullivan, AFP | Yahoo said 'recently obtained new intelligence' showed all user accounts had been affected by a giant data theft in 2013.

Video by FRANCE 24

Text by NEWS WIRES

Latest update : 2017-10-04

Yahoo on Tuesday said that all three billion of its accounts were hacked in a 2013 data theft, tripling its earlier estimate of the size of the largest breach in history and sharply increasing the legal exposure of its new owner, Verizon.

The news expands the likely number and claims of class action lawsuits by shareholders and Yahoo account holders, attorneys said.

Yahoo, the early face of the internet for many in the world, already faced at least 41 consumer class-action lawsuits in US federal and state courts, according to company securities filing in May.

John Yanchunis, a lawyer representing some of the affected Yahoo users, said a federal judge who allowed the case to go forward still had asked for more information to justify his clients' claims.

"I think we have those facts now," he said. "It's really mind-numbing when you think about it."

Yahoo said last December that data from more than 1 billion accounts was compromised in 2013, the largest of a series of thefts that forced Yahoo to cut the price of its assets in a sale to Verizon.

Yahoo on Tuesday said "recently obtained new intelligence" showed all user accounts had been affected. The company said the investigation indicated that the stolen information did not include passwords in clear text, payment card data, or bank account information.

But the information was protected with outdated, easy-to-crack encryption, according to academic experts. It also included security questions and backup email addresses, which could make it easier to break into other accounts held by the users.

Many Yahoo users have multiple accounts, so far fewer than 3 billion were affected, but the theft ranks as the largest to date, and a costly one for the internet pioneer.

Verizon in February lowered its original offer by $350 million for Yahoo assets in the wake of two massive cyber attacks at the internet company.

Some lawyers asked whether Verizon would look for a new opportunity to address the price.

"This is a bombshell," said Mark Molumphy, lead counsel in a shareholder derivative lawsuit against Yahoo's former leaders over disclosures about the hacks.

Verizon did not respond to a request for comment about any possible lawsuit over the deal.

Verizon, the likely main target of legal actions, also could be challenged as it launches a new brand, Oath, to link its Yahoo, AOL and Huffington Post internet properties.

In August in the separate lawsuit brought by Yahoo's users, US Judge Lucy Koh in San Jose, California, ruled Yahoo must face nationwide litigation brought on behalf of owners accounts who said their personal information was compromised in the three breaches. Yanchunis, the lawyer for the users, said his team planned to use the new information later this month to expanding its allegations.

Also on Tuesday, Senator John Thune, chairman of the US Senate Commerce Committee, said he plans to hold a hearing later this month over massive data breaches at Equifax Inc and Yahoo. The US Securities and Exchange Commission already had been probing Yahoo over the hacks.

The closing of the Verizon deal, which was first announced in July, had been delayed as the companies assessed the fallout from two data breaches that Yahoo disclosed last year. The company paid $4.48 billion for Yahoo's core business.

A Yahoo official emphasized Tuesday that the 3 billion figure included many accounts that were opened but that were never, or only briefly, used.

The company said it was sending email notifications to additional affected user accounts.

The new revelation follows months of scrutiny by Yahoo, Verizon, cybersecurity firms and law enforcement that failed to identify the full scope of the 2013 hack.

The investigation underscores how difficult it was for companies to get ahead of hackers, even when they know their networks had been compromised, said David Kennedy, chief executive of cybersecurity firm TrustedSEC LLC.

Companies often do not have systems in place to gather up and store all the network activity that investigators could use to follow the hackers' tracks.

“This is a real wake up call,” Kennedy said. “In most guesses, it is just guessing what they had access to."

(REUTERS)

Date created : 2017-10-04

  • USA

    US charges Russian spies, hackers over Yahoo data breach

    Read more

  • CYBER SECURITRY

    'One billion accounts breached' in Yahoo hack

    Read more

  • INTERNET

    Yahoo says at least 500 million accounts hacked in 2014

    Read more

COMMENT(S)