Yahoo: 3 billion accounts breached in 2013. Yes, 3 billion - wistv.com - Columbia, South Carolina

Yahoo: 3 billion accounts breached in 2013. Yes, 3 billion

(Source: Raycom Media) (Source: Raycom Media)
By MATT O'BRIEN
AP Technology Writer

BOSTON (AP) - Yahoo has tripled down on what was already the largest data breach in history, saying it affected all 3 billion accounts on its service, not the 1 billion it revealed late last year.

The company announced Tuesday that it has sent emails providing notice to additional user accounts affected by the August 2013 data theft.

The breach now affects a number that represents nearly "half the world," said Sam Curry, chief security officer for Boston-based firm Cybereason, though there's likely to be more accounts than actual users.

"Whether it's 1 billion or 3 billion is largely immaterial. Assume it affects you," Curry said. "Privacy is really the victim here."

Yahoo first disclosed the breach in December . The stolen information included names, email addresses, phone numbers, birthdates and security questions and answers.

Following its acquisition by Verizon in June, Yahoo says, it obtained new intelligence while investigating the breach with help from outside forensic experts. It says the stolen customer information did not include passwords in clear text, payment card data or bank account information.

Yahoo had already required users to change their passwords and invalidate security questions so they couldn't be used to hack into accounts.

The disclosure is also a huge embarrassment for Verizon, which has just started running TV ads for its new subsidiary Oath, which will consist of Yahoo and AOL services.

Verizon spokesman David Samberg said the company has no regrets about buying Yahoo, despite the latest revelation.

Companies often don't know the full extent of a breach and have to revise statements about how it affects customers years later, said Ben Johnson, co-founder and chief technology officer for Obsidian Security, based in Newport Beach, California. Johnson said Yahoo might never know exactly what was accessed.

"The fact is attackers are having field days and the problem is only going to get worse," he said.

__

Staff writer Michael Liedtke in San Francisco contributed to this report.

Copyright 2017 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

  • Cyber crimeMore>>

  • Equifax hacked again, this time by malware

    Thursday, October 12 2017 2:06 PM EDT2017-10-12 18:06:22 GMT
    Thursday, October 12 2017 2:50 PM EDT2017-10-12 18:50:19 GMT

    Equifax has been hacked again - the company took its website at least partially down after a malware scam.

    More >>

    Equifax has been hacked again - the company took its website at least partially down after a malware scam.

    More >>
  • S. Korean lawmaker says North Korea hacked war plans

    S. Korean lawmaker says North Korea hacked war plans

    Tuesday, October 10 2017 12:34 PM EDT2017-10-10 16:34:23 GMT
    Wednesday, October 11 2017 7:52 PM EDT2017-10-11 23:52:13 GMT
    South Korean media are quoting a lawmaker as saying that North Korean hackers may have stolen highly classified military documents, including U.S.-South Korean wartime "decapitation strike" plans against the North.More >>
    South Korean media are quoting a lawmaker as saying that North Korean hackers may have stolen highly classified military documents, including U.S.-South Korean wartime "decapitation strike" plans against the North.More >>
  • Report: Russian hackers target secrets taken by NSA worker

    Report: Russian hackers target secrets taken by NSA worker

    Thursday, October 5 2017 7:11 PM EDT2017-10-05 23:11:26 GMT
    Tuesday, October 10 2017 7:45 AM EDT2017-10-10 11:45:58 GMT

    A news report says hackers allegedly working for the Kremlin stole details about how the U.S. infiltrates foreign networks and defends against cyberattacks after an NSA contractor took the classified material home...

    More >>

    A news report says hackers allegedly working for the Kremlin stole details about how the U.S. infiltrates foreign networks and defends against cyberattacks after an NSA contractor took the classified material home and put it on a personal computer.

    More >>
Powered by Frankly