Up to 500 million users’ information stolen in apparent “state-sponsored” hack
Yahoo claims the credentials of up to 500 million users were stolen in a massive hack. Although the breach occurred in 2014, full details are only now coming to light. Information stolen in the breach includes names, emails, and “unencrypted security questions and their answers”. The FBI have confirmed they are investigating.
The company claims the information was “stolen by what we believe is a state-sponsored actor”. The company declined to name the country from which it believes the attack originated.
News of the security breach began to surface back in August when a hacker known as “Peace” attempted to sell information on 200million Yahoo accounts. Yesterday (Thursday), Yahoo disclosed the full scale of the attack.
Yahoo was bought by US telecoms company Verizon in July for $4.8bn (£3.7bn). Verizon reportedly only became aware of the hack in the last two days.
As a security precaution anyone with a Yahoo account (for email or otherwise) should update their password, particularly if they haven’t done so since 2014.
What’s your take on these repeated security breaches? Are technology companies doing enough to protect our data? Let us know your thoughts in the Comments section below!