Troublingly, Yahoo’s chief information security officer Bob Lord says that the company hasn’t been able to determine how the data from the one billion accounts was stolen. “We have not been able to identify the intrusion associated with this theft,” Lord wrote in a post announcing the hack.
“The stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers,” Lord added.
Yahoo was alerted to the massive breach by law enforcement and has examined the data with the help of outside forensic experts. The data does not appear to include payment details or plaintext passwords, but it’s still bad news for Yahoo account holders. The hashing algorithm MD5 is no longer considered secure and MD5 hashes can easily be looked up online to discover the passwords they hide.
Yahoo says it is notifying the account holders affected in the breach. Affected users will be required to change their passwords.
Via Reddit: https://techcrunch.com/2016/12/14/yahoo-discloses-hack-of-1-billion-accounts/
4 comments:
AT&T U-verse uses a lot of Yahoo services, right?
What gets me is they say change your password, but, if you change it at AT&T, you have to change it Yahoo also (at least for your primary account). Go to Yahoo to change it there and it flips you back to AT&T.
No wonder these guys are in trouble.
Is the email legitimate?
So depressing.
Fuck, again with these people. Luckily my Yahoo account has nothing on it.
Post a Comment