Yahoo States That Three Billion Accounts Compromised in 2013 Data Breach
Yahoo has tripled down on what was already the largest data breach in history, saying on Oct. 3, 2017, that it affected all three billion accounts on its service, not the one billion it revealed late last year, reports The Hollywood Reporter, which added that the 2013 breach was previously disclosed by the company in December and “the stolen information included names, email addresses, phone numbers, birthdates and security questions and answers.
“Following its acquisition by Verizon in June, Yahoo says, it obtained new intelligence while investigating the breach with help from outside forensic experts. The company says the stolen customer information did not include passwords in clear text, payment card data or bank account information.
“Yahoo had already required users to change their passwords and invalidate security questions so they couldn’t be used to hack into accounts.
“”Whether it’s 1 billion or 3 billion is largely immaterial. Assume it affects you,” said Sam Curry, chief security officer for Boston-based firm Cybereason. “Privacy is really the victim here.””
