My Yahoo Account Was Hacked! Now What?
Summary: Yahoo disclosed that a billion user accounts were hacked, with stolen data possibly including names, email addresses, telephone numbers, dates of birth, MD5-hashed passwords, and in some cases encrypted or unencrypted security questions and answers. Krebs reports the attackers also forged authentication cookies, which would have granted access to targeted accounts without a password and could have kept them logged in for weeks or indefinitely.
Bottom line: The MD5 hashes are crackable against freely available rainbow tables, and the stolen security questions and answers double as recovery backdoors at any other site where you reused them - so the exposure extends well past the Yahoo inbox itself.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026