Story image

Yahoo's 1bn user data breach: Everything you should know

16 Dec 16

Yahoo has uncovered another data breach, where more than 1bn user accounts were compromised in August 2013 - making it the largest data breach in history.

The company says it is ‘likely distinct’ from the data breach in September, and believes an unauthorised third party stole data associated with more than one billion user accounts in August.

Yahoo’s CISO, Bob Lord, confirmed the breach in a recent blog post saying that ’with the assistance of outside forensic experts…it appears to be Yahoo user data’.

“We have not been able to identify the intrusion associated with this theft. We believe this incident is likely distinct from the incident we disclosed on September 22, 2016,” writes Lord.

He says that for potentially affected accounts, the stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers.

However, Lord explains that the stolen information did not include passwords in clear text, payment card data, or bank account information.

“Payment card data and bank account information are not stored in the system the company believes was affected,” he writes.

For all potentially affected Yahoo users, most should have been notified, and the company has taken steps to secure their accounts, including requiring users to change their passwords.

Lord also mentions that they have invalidated unencrypted security questions and answers so that they cannot be used to access an account.

Commenting on the breach, Ryan Kalember, SVP of Cyber Security Strategy at Proofpoint, says it’s critical that consumers and business alike realise that email credentials can be the gateway to more sensitive information than nearly anything else.

“News of the additional Yahoo breach is yet another indication that email accounts are a prime target among criminals,” he says.

“Email is the top way cyber criminals are breaking into the world’s most sophisticated organisations and they target personal inboxes and account information with the same aggressiveness.”

Tyler Moffit, senior threat research analyst at Webroot, adds that this data breach is huge on so many levels.

“Yahoo says hackers stole names, email addresses, phone numbers, dates of birth and encrypted or unencrypted security questions and answers from more than 1 billion accounts,” he says.

“These accounts have been compromised for years and the sheer number of accounts means this has been a large source of identity theft already.

No one should have faith in Yahoo at this point and might very well affect the $4.8 billion Verizon deal.”

Valve stops Steam Link hardware sales; promotes Android app instead
Valve announced that its supply of Steam Link hardware has sold out – and by the looks of it, it won’t be making any more.
Hands-on review: Spyro Reignited Trilogy brings back the PSOne icon
Spyro Reignited Trilogy is a great remake that features new school graphics with old fashioned style of gameplay.
Don't let criminals ruin your online shopping
It’s that time of year again. Not only have New Zealanders developed a bit of a taste for sales like black Friday and cyber Monday, the holiday season is well upon us.
Student app Niesh gets $1m funding windfall
“We’re a data driven company, and we’re using what we know to benefit students and the companies giving them rewards, discounts, and jobs,” explains co-founder Jae Yoo.  
NZ-grown fitness app draws on augmented reality
“I started working on creating an AR app over a year ago starting with just fitness. But as we moved on, it made sense to add in special features."
NZ's online merchants can now offer Google Pay
With Google Pay, customers will be able to speed through checkout with just a few clicks."
Hands-on review: Intel Core i7 8086K Limited Edition
Whilst I’ve seen commemorative coins and stamps, I’ve never seen a commemorative CPU. Intel’s Core i7 8086K is exactly that.
Hands-on review: Logitech G1 Pro Gaming Headphones and Mouse
For the serious gamer, this kit will have you happily spreading mayhem in glorious surround sound.