Yahoo: One Billion More Accounts Hacked
Summary: Yahoo disclosed a separate breach in which an unauthorized third party stole data on more than one billion user accounts in August 2013, distinct from the 500 million accounts it reported on September 22, 2016. Yahoo CISO Bob Lord said the stolen data may have included names, email addresses, telephone numbers, dates of birth, MD5-hashed passwords and, in some cases, encrypted or unencrypted security questions and answers, and that attackers forged authentication cookies to reach targeted accounts without a password.
Key Takeaway: Yahoo connected some of the activity to the same state-sponsored actor behind the September breach and said it could not identify the intrusion associated with the theft, while forged cookies could have kept an intruder logged in for weeks or indefinitely.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026