Technology

Yahoo confirms hack, says data on 500 million users was stolen

Yahoo has announced that the account information of at least 500 million users was stolen by hackers two years ago.

In a statement, Yahoo said user information — including names, email addresses, telephone numbers, birth dates, passwords, and in some cases security questions — was compromised in 2014 by what it believed was a "state-sponsored actor." It did not name the country involved.

More News Videos

Yahoo confirms massive data breach

Yahoo just admitted it fell victim to a massive data breach that has exposed 500 million user accounts in 2014.

"This is the biggest data breach ever," said well-known cryptologist Bruce Schneier, speaking to Reuters.

Yahoo said it was working with law enforcement officials. It encouraged users to review their online accounts for suspicious activity and to watch out for suspicious emails.

Yahoo's breach announcement comes as the company negotiates a sale to US telco Verizon.
Yahoo's breach announcement comes as the company negotiates a sale to US telco Verizon. Photo: AP

But Hold Security founder Alex Holden told The New York Times the incident could have far-reaching consequences for users beyond Yahoo's services.

"The stolen Yahoo data is critical because it not only leads to a single system but to users' connections to their banks, social media profiles, other financial services and users' friends and family,", he said. 

Advertisement

Hold has been tracking the flow of stolen Yahoo credentials on the underground web.

"This is one of the biggest breaches of people's privacy and very far reaching", said Holden.

The announcement of the breach comes as US telco Verizon Communications moves forward with its $US4.8 billion ($6.3 billion) acquisition of Yahoo's core business. It is unclear what, if any, effect the breach will have on Yahoo's sale price. That will most likely depend on what Verizon learns about Yahoo's security controls.

Agencies

6 comments