Yahoo is expected to confirm massive data breach, impacting hundreds of millions of users (update)
http://www.recode.net/2016/9/22/13012836/yahoo-is-expected-to-confirm-massive-data-breach-impacting-hundreds-of-millions-of-users
Yahoo is expected to confirm massive data breach, impacting hundreds of millions of users
A hacker named Peace is bringing chaos to the Internet giant just as its sale to Verizon is pending.
By Kara Swisher @karaswisher Sep 22, 2016, 2:18a
Yahoo is poised to confirm a massive data breach of its service, according to several sources close to the situation, hacking that has exposed several hundred million user accounts. While sources were unspecific about the extent of the incursion, since there is the likelihood of government investigations and legal action related to the breach, they noted that it is widespread and serious.
Earlier this summer, Yahoo said it was investigating a data breach in which hackers claimed to have access to 200 million user accounts and was selling them online. Its as bad as that, said one source. Worse, really.
(snip)
But theres nothing smooth about this hack, said sources, which became known in August when an infamous cybercriminal named Peace said on a website that he was selling credentials of 200 million Yahoo users from 2012 on the dark web for just over $1,800. The data allegedly included user names, easily decrypted passwords, personal information like birth dates and other email addresses.
At the time, Yahoo said it was aware of the claim, but the company declined to say if it was legitimate and said that it was investigating the information. But it did not issue a call for a password reset to users. Now, said sources, Yahoo might have to, although it will be a case of too little, too late.
(snip)
((Also being reported on Bloomberg and USA Today))