Yahoo Says Hackers Stole Information From More Than one Billion Accounts: The Two-Way: NPR
Yahoo Says Hackers Stole Information From More Than one Billion Accounts
A Yahoo sign at the company’s headquarters in Sunnyvale, Calif. The company has announced a hacking of user accounts that happened in 2013, but it says payment card information was not accessed. Marcio Jose Sanchez/AP hide caption
A Yahoo sign at the company’s headquarters in Sunnyvale, Calif. The company has announced a hacking of user accounts that happened in 2013, but it says payment card information was not accessed.
Marcio Jose Sanchez/AP
Yahoo says hackers stole names, email addresses, phone numbers, dates of birth and encrypted or unencrypted security questions and answers from more than one billion accounts.
In a statement posted to its website on Wednesday, the company said it had “taken steps to secure user accounts and is working closely with law enforcement.”
“As Yahoo previously disclosed in November, law enforcement provided the company with data files that a third party claimed was Yahoo user data. The company analyzed this data with the assistance of outside forensic experts and found that it emerges to be Yahoo user data. Based on further analysis of this data by the forensic experts, Yahoo believes an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts. .
“The investigation indicates that the stolen information did not include passwords in clear text, payment card data, or bank account information. Payment card data and bank account information are not stored in the system the company believes was affected.”
This is the 2nd major breach of private user information Yahoo has announced in the past three months. In September, the company said information associated with at least five hundred million user accounts had been stolen in 2014, as we reported.
Yahoo Inc. Confirms Data From ‘At Least five hundred Million’ Users Was Stolen
That security breach permitted hackers to steal the same types of information the company thinks were stolen in this example.
The company said that it believes the two incidents were distinct.
As it did in September, Yahoo created an FAQ page to response questions from account holders.
In both cases, Yahoo said its outside forensics experts had connected at least some elements of the hacking to a “state-sponsored actor” but did not say which foreign government it believed had supported the hack.
Earlier this year, Verizon agreed to buy Yahoo for $Four.8 billion. The purchase is supposed to be finalized early in 2017, but after the very first hack was announced in September, Verizon said it would “evaluate” its potential influence on the deal.
On Wednesday, Verizon said in a statement to The Associated Press that it would review the “fresh development before reaching any final conclusions.”