If you have a Yahoo account, better change your password – 500M accounts were hacked

This may be one of the largest cybersecurity breaches ever.
Author:
Updated:
Original:

If you have a Yahoo account, you may have been hacked.

At least 500 million user accounts may have be compromised after copies of user account information was stolen from the network in late 2014, Yahoo! Inc. said Thursday.

This may be one of the largest cybersecurity breaches ever, CNN Money reports.

Yahoo believes a "state-sponsored actor" (someone acting on behalf of a government) was behind this data breach, and stole information including names, email addresses, telephone numbers, dates of birth, passwords, and in some cases encrypted or unencrypted security questions and answers.

Sensitive financial data, like bank account numbers and credit card information, isn't believed to have been stolen, Yahoo says.

People whose accounts may have been affected will be notified, Yahoo says, and the company has taken steps to secure their accounts. All users are urged to do the following to further protect their information:

  • If you haven't changed your password since 2014, you should.
  • Inspect your account for any "suspicious activity."
  • If your password and security questions and answers for your Yahoo account are similar to the ones you use for other accounts, you should change them.
  • Avoid clicking on links or downloading attachments from suspicious emails.
  • Consider using Yahoo Account Key – it's an authentication tool that eliminates the need to use a password.

Yahoo says data breaches from state-sponsored actors has become common in the tech industry as of late, noting it has a program that detects and notifies people if their accounts have been targeted. Yahoo's program launched in December 2015, and since then roughly 10,000 users have received a notice (not counting the estimated 500 million users who are likely affected by this breach).

How will this affect Yahoo?

Cryptologist Bruce Schneier told Fortune that it's too early to tell the kind of impact the breach will have on Yahoo and its users because there are still a lot of questions – like the identity of the state-sponsored hackers.

It's also not clear how this breach will affect Yahoo's deal with Verizon – the company said in July it agreed to buy Yahoo for $4.83 billion.

But some critics are calling this breach a disaster for Yahoo. Corey Williams, of the internet security company Centrify, told Consumer Affairs this may be "the straw that breaks the camel’s back."

Williams says Yahoo "may very well be facing an existential crisis," noting this incident isn't necessarily a story about passwords being stolen, but "more about how law security and poor handling of incidents can impact the very existence of a company."

Williams wasn't the only person to question Yahoo's relevance. Many took to Twitter following Yahoo's announcement to joke about how they were surprised to learn the company still exists, while others asked the hackers to let them know what their password is.

https://twitter.com/TheDeluxe4/status/779057503287939072

https://twitter.com/MatPatGT/status/779062785745391616

https://twitter.com/rosie_tatiana/status/779048197368918016

https://twitter.com/mdhiggs/status/779041656574242817

https://twitter.com/Philanthroteer/status/779060371156066308

Next Up

Image from iOS (96)

Early Saturday fire damages Burger King in Richfield

The fire was reported around 1:15 a.m. Saturday.

Jamal Mashburn Jr. / Gopher Basketball

Maryland hands Gophers first home loss of season

The 17th-ranked Gophers fell to the Terrapins 63-49 on Saturday afternoon.

Alibi Drinkery in Lakeville.

Minnesota Department of Health files lawsuit against Alibi Drinkery

The Lakeville bar has been in the news for defying orders.

Iron Tap snowmobile delivery

This MN restaurant will deliver to your ice house... on a snowmobile

Just in case you work up an appetite fishing on Lake Waconia.

Klobuchar and Trump

Klobuchar reacts to report Trump plotted against his attorney general

The NYT story alleges further tactics to overturn the election.

snow, plow

Snowy Saturday: Here's how much snow is forecast in Minnesota

Snow will reach the metro area by the early afternoon.

Cam Talbot

Wild improve to 4-1 with victory over Dubnyk, Sharks

The 4-1 win gives the Wild four victories in five games to start the season.

Screen Shot 2021-01-22 at 9.08.16 PM

Daughter of MN Supreme Court Justice, Allina Health CEO found dead in Iowa

The 21-year-old was found dead in the parking lot of a sorority, according to police.

Screen Shot 2020-09-04 at 8.42.40 PM

Federal charges: MN marijuana lobbyist threatened U.S. representative

"I want you to be as scared as possible," the voicemail allegedly says.

Related

Yahoo is dealing with another hack, this one affects a billion accounts

The company believes this is separate from the last hack that affected 500M.

Franken to Yahoo: Why did it take 2 years to discover data breach?

Minnesota U.S. Senator and Congress' resident data protector Al Franken has turned his ire on Yahoo! after a huge data breach.

Do you know when Uber is tracking your location?

We know apps collect data about us. But how much, and how is it being used?

Records of millions of Verizon subscribers were unprotected online

A cybersecurity researcher first noticed the issue – though Verizon said the number of people affected is "overstated."

So long, Yahoo! The company is changing its name to Altaba

Six longtime directors will step down once the Verizon deal goes through.

Chipotle's payment systems were hacked – see if the one you go to was hit

Malware got into the register and card payment systems and scraped up info.