People walk in front of a Yahoo sign at the company’s headquarters in Sunnyvale, California, in 2014. (AP Photo/Marcio Jose Sanchez)

People walk in front of a Yahoo sign at the company’s headquarters in Sunnyvale, California, in 2014. (AP Photo/Marcio Jose Sanchez)

Yahoo: Data breach affected at least 500 million accounts

Associated Press

SAN FRANCISCO — Computer hackers swiped personal information from at least 500 million Yahoo accounts in what is believed to be the biggest digital break-in at an email provider.

The massive security breakdown disclosed Thursday poses new headaches for Yahoo CEO Marissa Mayer as she scrambles to close a $4.8 billion sale to Verizon Communication.

The breach Thursday dates back to late 2014, raising questions about the checks and balances within Yahoo — a fallen internet star that has been laying off staff to counter a steep drop in revenue during the past eight years.

At the time of the break-in, Yahoo’s security team was led by Alex Stamos, a respected industry executive who left last year to take a similar job at Facebook.

Yahoo didn’t explain what took so long to uncover a breach that it blamed on a “state-sponsored actor” — parlance for a hacker working on behalf of a foreign government. The Sunnyvale, California, company declined to explain how it reached its conclusions about the attack, but said it is working with the FBI and other law enforcement as part of its ongoing investigation.

Most accounts ever stolen

“This is a pretty big deal that is probably going to cost them tens of millions of dollars,” predicted Avivah Litan, a computer security analyst for Gartner Inc. “Regulators and lawyers are going to have a field day with this one.”

Litan described it as the most accounts stolen from a single email provider.

The stolen data includes users’ names, email addresses, telephone numbers, birth dates, scrambled passwords, and the security questions — and answers — used to verify an accountholder’s identity.

Last month, the tech site Motherboard reported that a hacker who uses the name “Peace” boasted that he had account information belonging to 200 million Yahoo users and was trying to sell the data on the web.

Yahoo is recommending that users change their passwords if they haven’t done so since 2014. The company said the attacker didn’t get any information about its users’ bank accounts or credit and debit cards.

The Verizon impact

News of the security lapse could cause some people to have second thoughts about relying on Yahoo’s services, raising a prickly issue for the company as it tries to sell its digital operations to Verizon Communications.

That deal, announced two months ago, isn’t supposed to close until early next year. That leaves Verizon with wiggle room to renegotiate the purchase price or even back out if it believes the security breach will harm Yahoo’s business. That could happen if users shun Yahoo or file lawsuits because they’re incensed by the theft of their personal information.

Verizon said it still doesn’t know enough about the Yahoo break-in to assess the potential consequences. “We will evaluate as the investigation continues through the lens of overall Verizon interests, including consumers, customers, shareholders and related communities,” the company said.

Delay of acquisition?

At the very least, Verizon is going to need more time to assess what it will be getting into if it proceeds with its plans to take over Yahoo, said Scott Vernick, an attorney specializing in data security for the law firm Fox Rothschild.

“This is going to slow things down. There is going to be a lot of blood, sweat and tears shed on this” Vernick said. “A buyer needs to understand the cybersecurity strengths and weaknesses of its target these days.”

Investors evidently aren’t nervous about the Verizon deal unraveling yet. Yahoo’s stock added a penny Thursday to close at $44.17. But the Verizon sale represents a sliver of Yahoo’s total market value, which primarily consists of a stake in Chinese e-commerce leader Alibaba Group currently worth $42 billion.

Talk to us

More in Herald Business Journal

FILE - A Boeing 737 Max jet prepares to land at Boeing Field following a test flight in Seattle, Sept. 30, 2020. Boeing said Tuesday, Jan. 10, 2023, that it took more than 200 net orders for passenger airplanes in December and finished 2022 with its best year since 2018, which was before two deadly crashes involving its 737 Max jet and a pandemic that choked off demand for new planes. (AP Photo/Elaine Thompson, File)
Boeing inks deal for up to 300 737 Max planes with Ryanair

At Boeing’s list prices, the deal would be worth more than $40 billion if Ryanair exercises all the options.

Logo for news use featuring Snohomish County, Washington. 220118
Four recognized for building a better community

Economic Alliance of Snohomish County hosts annual awards

Logo for news use featuring Snohomish County, Washington. 220118
Business Briefs: Pandemic recovery aid and workforce support program

Snohomish County launches small business COVID recovery program, and is now accepting NOFA grant applications.

Elson S. Floyd Award winner NAACP President Janice Greene. (Olivia Vanni / The Herald)
Janice Greene: An advocate for supplier diversity and BIPOC opportunities

The president of the Snohomish County NAACP since 2008 is the recipient of this year’s Elson S. Floyd Award.

Emerging Leader Rilee Louangphakdy (Olivia Vanni / The Herald)
Rilee Louangphakdy: A community volunteer since his teens

Volunteering lifted his spirits and connected him with others after the death of a family member.

Emerging Leader Alex McGinty (Olivia Vanni / The Herald)
Alex Zitnik-McGinty: Find a group you like and volunteer!

Her volunteer activities cover the spectrum. Fitting in “service work is important as we grow.”

Opportunity Lives Here award winner Workforce Snohomish and director, Joy Emory. (Olivia Vanni / The Herald)
Workforce Snohomish receives Opportunity Lives Here Award

Workforce offers a suite of free services to job seekers and businesses in Snohomish County.

Henry M. Jackson award winner Tom Lane. (Olivia Vanni / The Herald)
Tom Lane: An advocate for small and local businesses

The CEO of Dwayne Lane’s Auto Family is a recipient of this year’s Henry M. Jackson Award.

John M. Fluke Sr. award winner Dom Amor. (Olivia Vanni / The Herald)
Dom Amor: Working behind the scenes to improve the region

Dom Amor is the recipient of this year’s John M. Fluke Sr. Award

Dr. David Kirtley at the new Helion headquarters in Everett, Washington on Wednesday, Jan. 19, 2022  (Olivia Vanni / The Herald)
Everett nuclear fusion energy company nets first customer: Microsoft

The Everett company, on a quest to produce carbon-free electricity, agreed to provide power to the software giant by 2028.

Hunter Mattson, center, is guided by Blake Horton, right, on a virtual welding simulation during a trade fair at the Evergreen State Fairgrounds in Monroe, Washington, on Wednesday, May 3, 2023. High school kids learned about various trades at the event. (Annie Barker / The Herald)
Trade fair gives Snohomish County kids glimpse of college alternatives

Showcasing the trades, the Trade Up event in Monroe drew hundreds of high school students from east Snohomish County.

A Tesla Model Y Long Range is displayed on Feb. 24, 2021, at the Tesla Gallery in Troy, Mich.  Opinion polls show that most Americans would consider an EV if it cost less, if more charging stations existed and if a wider variety of models were available. The models are coming, but they may roll out ahead of consumer tastes. And that could spell problems for the U.S. auto industry, which is sinking billions into the new technology with dozens of new vehicles on the way.  (AP Photo/Carlos Osorio)
Tesla leases space at Marysville business park

Elon Musk’s electric car company reportedly leased a massive new building at the Cascade Business Park.