Yahoo: Hackers Stole Data From More Than 1 Billion Accounts - NBC Chicago

Yahoo: Hackers Stole Data From More Than 1 Billion Accounts

"Yahoo is notifying potentially affected users and has taken steps to secure their accounts," the tech company said



    Mega-Breach Exposes More Than 1 Billion Yahoo! Accounts

    If you have a Yahoo! account -- now or in the past -- your information was likely stolen. Ian Cull reports. (Published Thursday, Dec. 15, 2016)

    Yahoo announced Wednesday that more than one billion user accounts may have been affected in a hacking attack dating back to August 2013, a revalation that may put a recent multi-billion-dollar deal with Verizon in jeopardy.

    The Sunnyvale, California, says it believes information, including names, email addresses, phone numbers, birth dates and security questions and answers, may have been stolen in the breach. The company says it believes bank-account information and payment-card data were not affected.

    The security breach was discovered after law enforcement officials provided the company with data files that a "third party" claimed was Yahoo user data. After analyzing the information, Yahoo concluded that the data belonged to its users.

    Yahoo says it has not been able to identify the source of the hack.

    How to Protect Yourself From Hackers

    [NATL] How to Protect Yourself From Hackers

    From regularly updating your software to uncommon screen lock codes, there are many things you can do to protect yourself from hackers trying to access your sensitive information. NBC News' Mark Barger and Consumer Reports Editor Jerry Beilinson offer some helpful tips on how you can safeguard your data.

    (Published Friday, Nov. 30, 2018)

    "Yahoo is notifying potentially affected users and has taken steps to secure their accounts, including requiring users to change their passwords. Yahoo has also invalidated unencrypted security questions and answers so that they cannot be used to access an account," the company said in a statement. 

    Yahoo is also urging users to avoid clicking links or downloading attachments from suspicious emails, and to be cautious of unsolicited communications that ask for personal information.

    The tech giant says it's a different breach from the one it disclosed in September, when it reported that 500 million accounts were exposed. 

    Based on the ongoing investigation, the company believes hackers accessed the company's proprietary code to learn how to forge cookies that could allow an intruder to access users' accounts without a password. The company says it has connected some of this activity to the same "state-sponsored actor" believed to be responsible for the data theft the company disclosed on September 22, 2016.

    The new hack revelation raises questions about whether Verizon will try to change the terms of its $4.8 billion proposed acquisition of Yahoo.

    If the hacks cause a user backlash against Yahoo, the company's services wouldn't be as valuable to Verizon, raising the possibility that the sale price might be re-negotiated or the deal may be called off. The telecom giant wants Yahoo and its many users to help it build a digital ad business.

    After the news of the first hack broke, Verizon said it would re-evaluate its Yahoo deal and in a Wednesday statement said it will review the "new development before reaching any final conclusions." Spokesman Bob Varettoni declined to answer further questions.

    The Associated Press contributed to this report.