Skip to main content

If you have a Yahoo account, better change your password – 500M accounts were hacked

This may be one of the largest cybersecurity breaches ever.
  • Author:
  • Updated:
    Original:

If you have a Yahoo account, you may have been hacked.

At least 500 million user accounts may have be compromised after copies of user account information was stolen from the network in late 2014, Yahoo! Inc. said Thursday.

This may be one of the largest cybersecurity breaches ever, CNN Money reports.

Yahoo believes a "state-sponsored actor" (someone acting on behalf of a government) was behind this data breach, and stole information including names, email addresses, telephone numbers, dates of birth, passwords, and in some cases encrypted or unencrypted security questions and answers.

Sensitive financial data, like bank account numbers and credit card information, isn't believed to have been stolen, Yahoo says.

People whose accounts may have been affected will be notified, Yahoo says, and the company has taken steps to secure their accounts. All users are urged to do the following to further protect their information:

  • If you haven't changed your password since 2014, you should.
  • Inspect your account for any "suspicious activity."
  • If your password and security questions and answers for your Yahoo account are similar to the ones you use for other accounts, you should change them.
  • Avoid clicking on links or downloading attachments from suspicious emails.
  • Consider using Yahoo Account Key – it's an authentication tool that eliminates the need to use a password.

Yahoo says data breaches from state-sponsored actors has become common in the tech industry as of late, noting it has a program that detects and notifies people if their accounts have been targeted. Yahoo's program launched in December 2015, and since then roughly 10,000 users have received a notice (not counting the estimated 500 million users who are likely affected by this breach).

How will this affect Yahoo?

Cryptologist Bruce Schneier told Fortune that it's too early to tell the kind of impact the breach will have on Yahoo and its users because there are still a lot of questions – like the identity of the state-sponsored hackers.

It's also not clear how this breach will affect Yahoo's deal with Verizon – the company said in July it agreed to buy Yahoo for $4.83 billion.

But some critics are calling this breach a disaster for Yahoo. Corey Williams, of the internet security company Centrify, told Consumer Affairs this may be "the straw that breaks the camel’s back."

Williams says Yahoo "may very well be facing an existential crisis," noting this incident isn't necessarily a story about passwords being stolen, but "more about how law security and poor handling of incidents can impact the very existence of a company."

Williams wasn't the only person to question Yahoo's relevance. Many took to Twitter following Yahoo's announcement to joke about how they were surprised to learn the company still exists, while others asked the hackers to let them know what their password is.

https://twitter.com/TheDeluxe4/status/779057503287939072

https://twitter.com/MatPatGT/status/779062785745391616

https://twitter.com/rosie_tatiana/status/779048197368918016

https://twitter.com/mdhiggs/status/779041656574242817

https://twitter.com/Philanthroteer/status/779060371156066308

Next Up

image

Hospital chiefs say nursing strike will come at 'worst possible time'

A nurses union announced an almost three-week strike to take place in the Twin Cities.

snow

Sven Sundgaard: What's in store for MN's weather in December?

Sundgaard recaps Minnesota's fall and looks ahead to December.

work-g674ba1702_1280

Manure spill in Wisconsin leads to hours-long main street disruption

The spill was first reported just before 7:30 a.m. Tuesday morning.

IceCube

Ice Cube to perform 2 nights at Mystic Lake Casino

The rapper hasn't performed in Minnesota since 2018.

image

Nicollet Mall's new Ties Lounge & Rooftop closes 'indefinitely'

The establishment aimed to reconnect the downtown community.

Screen Shot 2022-12-01 at 9.15.44 AM

Chinese restaurant closing after 50 years in Columbia Heights

The beloved family-owned restaurant will close Dec. 24.

Screen Shot 2022-12-01 at 9.43.40 AM

Kris Laudien leaving KARE 11 after four years on 'Sunrise'

KARE 11 announced the appointment of Jason Hackett to the morning show this week.

covid

MN's COVID update for the week ending Tuesday, Nov. 29

There are now more than 570 people hospitalized with COVID-19 in Minnesota.

MNAPresser12122

Twin Cities nurses to strike for 20 days starting Dec. 11

A strike in Duluth and Two Harbors doesn't have an end date set.

Related

Yahoo is dealing with another hack, this one affects a billion accounts

The company believes this is separate from the last hack that affected 500M.

Franken to Yahoo: Why did it take 2 years to discover data breach?

Minnesota U.S. Senator and Congress' resident data protector Al Franken has turned his ire on Yahoo! after a huge data breach.

Do you know when Uber is tracking your location?

We know apps collect data about us. But how much, and how is it being used?

Records of millions of Verizon subscribers were unprotected online

A cybersecurity researcher first noticed the issue – though Verizon said the number of people affected is "overstated."

So long, Yahoo! The company is changing its name to Altaba

Six longtime directors will step down once the Verizon deal goes through.