Recode say that Yahoo Data Breach of 200M passwords

Capt'n Midnight

http://www.recode.net/2016/9/22/13012836/yahoo-is-expected-to-confirm-massive-data-breach-impacting-hundreds-of-millions-of-users

Yahoo is poised to confirm a massive data breach of its service, according to several sources close to the situation. The company was the victim of hacking that has exposed several hundred million user accounts.

The timing is that there's a $4.8Bn deal with Verizon so YMMV

liamo

News agencies are now reporting 500 million accounts - some are reporting "at least" 500 million. Holy moley !!

L.Jenkins

If previous years in Yahoo didn't seal the deal for their take, this may have. I wonder how Verizon are feeling about their new acquisition now?

BoB_BoT

Yup, all over the news, 500million or as the news organisations like to shout "Half a billion!!!!" :P

Have some very old accounts, need to see if they're still active.

2014 this happened. How long did Yahoo! know and say nothing?

Standard Toaster

I better dust off my old Oceanfree account.

AnCatDubh

BoB_BoT wrote: »

Yup, all over the news, 500million or as the news organisations like to shout "Half a billion!!!!" :P .

Ah, FFS, Half a billion!!!

Now, 500million we could live with, but half a f***ing billion!!!!

They've just up'd the stakes haven't they

ItHurtsWhenIP

Saw this earlier:
https://isc.sans.edu/forums/diary/YAHDD+Yet+another+HUGE+data+Breach/21513/

not all Yahoo! customers may know they are Yahoo! customers. Yahoo! white labels email services on behalf of ISPs and email providers. I assume those white label providers will need to do notifications to their customers as well?

I was in touch with a buddy who uses Sky as his ISP. All his Gmail messages to me come "Via Yahoo.com", so it looks like Sky may be one of these "white label email services". He doesn't have a Sky e-mail account, but he did say it was offered to him when he switched.

Kur4mA

What a week for Infosec. The biggest publicised data breach in history and the biggest DDoS attack ever in the same 2 day period.

spaceHopper

I got a nice email from then today telling me that my account has been select for deactivation and I needed to click a link to stop it, I let it die but as it was a fake it's still alive.

ItHurtsWhenIP

Kur4mA wrote: »

What a week for Infosec. The biggest publicised data breach in history and the biggest DDoS attack ever in the same 2 day period.

Yeah - I was chatting with a friend about the Yahoo thing last night and he was saying that he had one from way back, but hadn't used it in about 8 or 9 years so he thought it would be worthless.

I then Googled the "value of a hacked email account" to highlight to him how much it is worth to the bad guys and of course all the links coming up were Brian Krebs ones, which I couldn't access, because he is offline, following the second biggest DDOS in history. :rolleyes:

_Tombstone_

Sad reality: It's cheaper to get hacked than build strong IT defenses