Yahoo confirms 500 million accounts stolen; may be biggest data breach ever

Washington: In what may be the largest-ever cyber breach, Yahoo on Thursday confirmed that hackers stole information from at least 500 million user accounts.

The internet company said that the information was stolen from the company’s network in late 2014, what it claimed was as a “state-sponsored” attack.

“The account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers,” Yahoo’s Chief Information Security Officer Bob Lord said in a statement.

However, an ongoing investigation into the hack suggests that stolen information did not include unprotected passwords, payment card data, or bank account information, according to Lord. Payment card data and bank account information are not stored in the affected system, he added.

The investigation has found that the attacker is no longer in Yahoo’s network. The internet giant said that it is working with law enforcement.

Early on Thursday Recode reported that Yahoo was set to confirm a major data breach impacting hundreds of millions of users.

Shuman Ghosemajumder, Chief Technology Officer of Shape Security, warns that the shockwaves from the breach could be felt far beyond Yahoo.

Yahoo is asking affected users to change passwords, and recommending anyone who hasn’t done so since 2014 take the same action as a precaution.

Cybercriminals, he explained, could use advanced automated tools to discover where users have used those same passwords on other sites.

The breach could also impact Yahoo’s $4.8 billion sale of its core business to Verizon.

“Merger and acquisition deals always carry some level of risk – companies inherit each other’s problems such as pending lawsuits, poorly manufactured products or regulatory violations,” explained Steven Grossman, VP of strategy and enablement for cyber security specialist Bay Dynamics, in an email to FoxNews.com.

Yahoo said that it along with other companies have launched programs to detect and notify users when a company strongly suspects that a state-sponsored actor has targeted an account.

(With Agencies input)

Kindly send reply or comments on this topic to [email protected]
Source:Zeenews

yahoo-verizon