outbrain
Close  

Yahoo notifies users of sophisticated breach methods

/ 07:46 AM February 16, 2017
Yahoo Breach email security

In this June 5, 2014, file photo, people walk in front of a Yahoo sign at the company’s headquarters in Sunnyvale, California. Yahoo says the personal information of 500 million accounts have been stolen in a massive security breakdown that represents the latest setback for the beleaguered internet company. The breach disclosed on Thursday, Sept. 22, 2016, dates back to late 2014. Yahoo is blaming the hack on a “state-sponsored actor.” AP FILE PHOTO

SAN FRANCISCO, United States — Yahoo said Wednesday it was notifying some users that hackers may have been able to use a maneuver to break into their accounts without stealing passwords.

The latest notifications were in response to the record breach disclosed late last year affecting an estimated one billion users — which involved forging of “cookies” or files used to authenticate users when they log into their accounts.

ADVERTISEMENT

The notification indicates the investigation into the attacks are in the final stage, according to a source familiar with the matter, noting that messages had been sent to “a reasonably final list” of Yahoo users.

READ: Yahoo says newly discovered hack hit one billion users

FEATURED STORIES

A Yahoo spokesman said the company was notifying all potentially affected users and that it had “invalidated” the forged cookies.

“As we have previously disclosed, our outside forensic experts have been investigating the creation of forged cookies that could have enabled an intruder to access our users’ accounts without a password,” the company said in a statement.

“The investigation has identified user accounts for which we believe forged cookies were taken or used.”

Yahoo announced in September that hackers in 2014 stole personal data from more than 500 million of its user accounts. It admitted another cyber attack in December, this one dating from 2013, affecting more than a billion users.

The data breaches have been a major embarrassment for a former internet leader that is in the process of selling its core operations to telecom giant Verizon for $4.8 billion.

READ: Another Yahoo breach and investors are rattled

Some reports Wednesday said the two companies had agreed to discount the price by $250 million to $300 million following disclosure of the attacks.

ADVERTISEMENT

Neither Yahoo nor Verizon commented on the reports.

Yahoo is selling its main operating business as a way to separate that from its more valuable stake in Chinese internet giant Alibaba.

The share-tending entity, to be renamed Altaba, Inc., will act as an investment company. CBB

TOPICS: cookies, data breach, Email, hacking, Social Media, technology, Yahoo
Read Next
EDITORS' PICK
MOST READ
Don't miss out on the latest news and information.
View comments

Subscribe to INQUIRER PLUS to get access to The Philippine Daily Inquirer & other 70+ titles, share up to 5 gadgets, listen to the news, download as early as 4am & share articles on social media. Call 896 6000.

For feedback, complaints, or inquiries, contact us.


© Copyright 1997-2020 INQUIRER.net | All Rights Reserved

We use cookies to ensure you get the best experience on our website. By continuing, you are agreeing to our use of cookies. To find out more, please click this link.