Skip to main content

If you have a Yahoo account, better change your password – 500M accounts were hacked

This may be one of the largest cybersecurity breaches ever.
  • Author:
  • Updated:
    Original:

If you have a Yahoo account, you may have been hacked.

At least 500 million user accounts may have be compromised after copies of user account information was stolen from the network in late 2014, Yahoo! Inc. said Thursday.

This may be one of the largest cybersecurity breaches ever, CNN Money reports.

Yahoo believes a "state-sponsored actor" (someone acting on behalf of a government) was behind this data breach, and stole information including names, email addresses, telephone numbers, dates of birth, passwords, and in some cases encrypted or unencrypted security questions and answers.

Sensitive financial data, like bank account numbers and credit card information, isn't believed to have been stolen, Yahoo says.

People whose accounts may have been affected will be notified, Yahoo says, and the company has taken steps to secure their accounts. All users are urged to do the following to further protect their information:

  • If you haven't changed your password since 2014, you should.
  • Inspect your account for any "suspicious activity."
  • If your password and security questions and answers for your Yahoo account are similar to the ones you use for other accounts, you should change them.
  • Avoid clicking on links or downloading attachments from suspicious emails.
  • Consider using Yahoo Account Key – it's an authentication tool that eliminates the need to use a password.

Yahoo says data breaches from state-sponsored actors has become common in the tech industry as of late, noting it has a program that detects and notifies people if their accounts have been targeted. Yahoo's program launched in December 2015, and since then roughly 10,000 users have received a notice (not counting the estimated 500 million users who are likely affected by this breach).

How will this affect Yahoo?

Cryptologist Bruce Schneier told Fortune that it's too early to tell the kind of impact the breach will have on Yahoo and its users because there are still a lot of questions – like the identity of the state-sponsored hackers.

It's also not clear how this breach will affect Yahoo's deal with Verizon – the company said in July it agreed to buy Yahoo for $4.83 billion.

But some critics are calling this breach a disaster for Yahoo. Corey Williams, of the internet security company Centrify, told Consumer Affairs this may be "the straw that breaks the camel’s back."

Williams says Yahoo "may very well be facing an existential crisis," noting this incident isn't necessarily a story about passwords being stolen, but "more about how law security and poor handling of incidents can impact the very existence of a company."

Williams wasn't the only person to question Yahoo's relevance. Many took to Twitter following Yahoo's announcement to joke about how they were surprised to learn the company still exists, while others asked the hackers to let them know what their password is.

https://twitter.com/TheDeluxe4/status/779057503287939072

https://twitter.com/MatPatGT/status/779062785745391616

https://twitter.com/rosie_tatiana/status/779048197368918016

https://twitter.com/mdhiggs/status/779041656574242817

https://twitter.com/Philanthroteer/status/779060371156066308

Next Up

8470850644_ccecdfb7ed_b

Ringo Starr's late cancellation of MN show was because he has COVID-19

The Beatles drummer was due to perform in Minnesota Sunday.

Screen Shot 2022-10-03 at 4.32.58 PM

Fire destroys cafe, two other business properties in downtown Fairfax

A former pizza joint was also destroyed, while two other properties were damaged.

Hennepin County Medical Center, HCMC

Woman dies from injuries in crash that killed her husband, another man

The couple in their 80s died in the collision near Lake Lillian.

CPAP masks

2 Park Nicollet employees convicted of embezzling $500,000

The pair worked at a CPAP clinic in St. Louis Park.

Concert

No Jingle Ball this year? Twin Cities left off iHeartRadio holiday tour

The annual touring event usually visits the Xcel Energy Center.

Target store

Target gives first look at some of its Deal Days discounts

The Minneapolis retailer is holding its Deal Days event earlier than ever, in an attempt to drive sales after a turbulent year.

Screen Shot 2022-10-03 at 11.03.12 AM

Man dies after crashing truck into western Wisconsin lake

The victim was unable to make it to shore despite being able to get out of his truck.

ATV, all-terrain vehicle

Sheriff: Man who didn't return to campsite died in ATV crash

It happened at the Foothills State Forest and Spider Lake ATV Recreation Area

Richard Liu, aka Liu Qiangdong

Chinese billionaire settles lawsuit over alleged rape in Minneapolis

The tech billionaire was accused of sexually assaulting a University of Minnesota student in 2018.

US Navy Flickr - COVID hospital PPE nurse

Frontline worker payments: Over a million Minnesotans to get $487.45

Gov. Tim Walz says the payments will start going out on Wednesday.

19050650853_a4a6377429_k

Ed Sheeran to bring North America stadium tour to Minneapolis

It's the second show announced for the Vikings stadium in 2023.

Related

Yahoo is dealing with another hack, this one affects a billion accounts

The company believes this is separate from the last hack that affected 500M.

Franken to Yahoo: Why did it take 2 years to discover data breach?

Minnesota U.S. Senator and Congress' resident data protector Al Franken has turned his ire on Yahoo! after a huge data breach.

Do you know when Uber is tracking your location?

We know apps collect data about us. But how much, and how is it being used?

Records of millions of Verizon subscribers were unprotected online

A cybersecurity researcher first noticed the issue – though Verizon said the number of people affected is "overstated."

So long, Yahoo! The company is changing its name to Altaba

Six longtime directors will step down once the Verizon deal goes through.