Yahoo Announces Yet Another Data Breach

Yahoo Announces Yet Another Data Breach

February 16, 2017         Written By John H. Oldshue

Yesterday, Yahoo emailed a number of users regarding yet another data breach. The company alleges that state-sponsored attackers were able to access Yahoo accounts by using a cookie forging attack, which allowed the hackers to gain access to user accounts without the user’s password.

The email read, “Our outside forensic experts have been investigating the creation of forged cookies that could allow an intruder to access users’ accounts without a password. Based on the ongoing investigation, we believe a forged cookie may have been used in 2015 or 2016 to access your account.”

This most recent breach seems to be separate from the August 2013 breach, which involved more than one billion user accounts. However, some of the 2015 and 2016 attacks could have links to the 2014 state-sponsored attack that involved 500 million accounts. The company has not addressed how many additional users may have been affected in this third attack.

Apparently, the attackers stole Yahoo’s source code and used that to generate the cookies. The company said they invalidated the cookies as soon as they learned of the attack, which locked out the hackers.

This most recent announcement follows news that Verizon, which is purchasing Yahoo, has asked for a $250 million discount after learning of the 2013 and 2014 hacks. Yahoo is also facing multiple class action lawsuits and inquiries from the SEC and other lawmakers.



The information contained within this article was accurate as of February 16, 2017. For up-to-date
information on any of the terms, cards or offers mentioned above, visit the issuer's website.


john-oldshue

About John H. Oldshue

John Oldshue is the creator of LowCards.com. He worked for over 15 years in television and won an Emmy award for his reporting. He covers credit card rate issues for LowCards.com.
View all posts by John H. Oldshue
Featured Low Interest Card
Top Features : 1.25X miles on every purchase; no annual fee; bonus of 20,000 miles once $1,000 is spent in first 3 months
Featured No Annual Fee Card
Top Features : Earn cash back twice. 1% when you buy plus 1% as you pay; 0% APR for 18 months on balance transfers
Featured Bad Credit Card
Top Features : No Annual Fee; Cash Back match at the end of your first year; Social Security Alerts
Featured Fair Credit Card
Top Features : No annual fee; access to higher credit line after making first 5 monthly payments on time
Featured Limited/No Credit
Top Features : No annual fee; reports to major credit bureaus; access to higher credit line after making first 5 monthly payments on time
Featured Cash Back Card
Top Features : No Annual Fee, Bonus Offer, Cash Back