500M Yahoo! Users Impacted by Hack; What It Says About Password Protection

By

Yahoo! is facing a lot of challenges lately. Add to the heap the breach – which the company confirmed today – that has affected 500 million Yahoo! accounts and is believed to have been carried out by a state-sponsored actor.

The breach, which dates back to late 2014, may have allowed unauthorized parties to access such information as Yahoo! account holder dates of birth, email addresses, names, telephone numbers, and security questions and answers (both encrypted and unencrypted), the company said. Yahoo! doesn’t think the breach included the theft of bank account information, payment card data, or unprotected passwords.

The company sent out an email and posted on its website a letter from Yahoo! CISO Bob Lord explaining the situation and what it is doing to protect its users. Yahoo! in the communications said it has invalidated unencrypted security questions and answers so they can’t be used to access an account, is working closely with law enforcement on the matter, and continues to upgrade its systems to identify and prevent unauthorized access to user accounts.

The company is also suggesting affected users change their passwords and adopt an alternate means of account verification, review their accounts for suspicious activity, avoid clicking on links or downloading attachments from suspicious emails, use caution in responding to unsolicited emails, and consider using the authentication tool Yahoo Account Key. Users with Yahoo Account Key don’t need passwords to sign into their accounts.

“Since we don’t have the specifics yet, it will be hard to say how everything happened,” notes Brad Bussie, CISSP, director of product management at STEALTHbits Technologies. “What we do know is that accounts that have been breached have value. The reason they have value is that people use the same password for multiple sites. The industry has been warning users for years that they need different complex passwords for each account they use online. The problem is that many consumers have dozens of accounts and remembering that many passwords is hard.” 




Edited by Alicia Young

Executive Editor, TMC

SHARE THIS ARTICLE
Related Articles

How LG Became an Innovator Without Recognition

By: Special Guest    8/13/2020

In the smartphone world, LG is facing dwindling returns as sales dry up. While the company is committing to its smartphone division, the truth is LG h…

Read More

Web-Based Retirement Planning Software For Consumers

By: Special Guest    8/11/2020

Are you a do-it-yourself type who loves to have control of your finances? So many more people now handle their own investment trading and retirement p…

Read More

Does using a VPN on a trusted network make sense?

By: Special Guest    8/11/2020

Some internet users wonder if using VPN on a trusted network makes sense. After all, there are only people in the network that you know or that you kn…

Read More

Why Technology Has A Powerful Impact On Sport Today?

By: Special Guest    8/10/2020

Technological advancements have affected every aspect of the modern world. The sports industry is not an exception. Technology has transformed differe…

Read More

Is Your Home Network Safe from Hackers?

By: Special Guest    8/7/2020

You probably have more devices connected to your home network every year -- TVs, robot vacuums, smart home devices, smart lights, smart thermostats, a…

Read More