You are here: Home » News-IANS » Defence-Security
Business Standard

500 million accounts hacked, says Yahoo

IANS  |  Washington 

Yahoo has confirmed that hackers stole information from at least 500 million user accounts in what it describes as a "state-sponsored" attack.

In a statement released on Thursday, Yahoo's Chief Information Security Officer Bob Lord said that the information was stolen from the company's network in late 2014, Fox News reported.

"The account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers," he said.

However, an ongoing investigation into the hack suggests that stolen information did not include unprotected passwords, payment card data, or bank account information, according to Lord. Payment card data and bank account information are not stored in the affected system, he added.

The investigation has found that the attacker is no longer in Yahoo's network. The internet giant said that it is working with law enforcement.

Early on Thursday Recode reported that Yahoo was set to confirm a major data breach impacting hundreds of millions of users.

Shuman Ghosemajumder, Chief Technology Officer of Shape Security, warns that the shockwaves from the breach could be felt far beyond Yahoo.

"Most stories will focus on Yahoo users, but the damage there appears to have been done months ago, and Yahoo will simply reset all their passwords so no further damage can be done," he said, in a statement emailed to

"The real issue now is that these passwords will be used to breach thousands of other websites unrelated to Yahoo."

Cybercriminals, he explained, could use advanced automated tools to discover where users have used those same passwords on other sites.

The breach could also impact Yahoo's $4.8 billion sale of its core business to Verizon.

"Merger and acquisition deals always carry some level of risk - companies inherit each other's problems such as pending lawsuits, poorly manufactured products or regulatory violations," explained Steven Grossman, VP of strategy and enablement for cyber security specialist Bay Dynamics, in an email to

"Cyber-related problems are also on that list, yet, even as more companies continue to fall victim to data breaches, cyber risk is not as high a priority as it should be."



(This story has not been edited by Business Standard staff and is auto-generated from a syndicated feed.)

Dear Reader,

Business Standard has always strived hard to provide up-to-date information and commentary on developments that are of interest to you and have wider political and economic implications for the country and the world. Your encouragement and constant feedback on how to improve our offering have only made our resolve and commitment to these ideals stronger. Even during these difficult times arising out of Covid-19, we continue to remain committed to keeping you informed and updated with credible news, authoritative views and incisive commentary on topical issues of relevance.
We, however, have a request.

As we battle the economic impact of the pandemic, we need your support even more, so that we can continue to offer you more quality content. Our subscription model has seen an encouraging response from many of you, who have subscribed to our online content. More subscription to our online content can only help us achieve the goals of offering you even better and more relevant content. We believe in free, fair and credible journalism. Your support through more subscriptions can help us practise the journalism to which we are committed.

Support quality journalism and subscribe to Business Standard.

Digital Editor

First Published: Fri, September 23 2016. 03:48 IST