Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Yahoo Customer Data Security Breach Litigation Settlement

yahoodatabreachsettlement.com

Post reply on HN
Print view View original

21–30 of 67 posts

Re: Yahoo Customer Data Security Breach Litigation Settlement

#21

Post by windexh8er »

koolba wrote: post #5
iflywithbook wrote: post #2

"Under the terms of the Settlement, Yahoo has enhanced, or, through its successor in interest, Oath Holdings Inc. (“Oath”), continues to enhance its business practices that will improve the security of its users’ personal information stored on its databases. Defendants will also pay for a Settlement Fund of $117,500,000. The Settlement Fund will provide a minimum of two years of Credit Monitoring Services to protect…

Why do judges agree to forcing consumers to have useless product of credit monitoring in place to receive a cash payout? Can I set up a “virtual” credit monitoring that provides that type of service in name only to cover that requirement? Imagine paying $5 to claim you have credit monitoring for settlement purposes.

Pretty much every major credit card offers it for free. Most large banks are now offering it as well. You shouldn't need to pay anything if you're using either of these.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#22

Post by cde-v »

koolba wrote: post #5
iflywithbook wrote: post #2

"Under the terms of the Settlement, Yahoo has enhanced, or, through its successor in interest, Oath Holdings Inc. (“Oath”), continues to enhance its business practices that will improve the security of its users’ personal information stored on its databases. Defendants will also pay for a Settlement Fund of $117,500,000. The Settlement Fund will provide a minimum of two years of Credit Monitoring Services to protect…

Why do judges agree to forcing consumers to have useless product of credit monitoring in place to receive a cash payout? Can I set up a “virtual” credit monitoring that provides that type of service in name only to cover that requirement? Imagine paying $5 to claim you have credit monitoring for settlement purposes.

Yeah I would much rather have the $0.37 than credit monitoring.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#23

Post by jannes »

ceejayoz wrote: post #14

How long before an identity thief pays PR Newswire to run a story on data breach settlement and harvest all the PII requested on these sorts of settlement claim forms? yahoodatabreachsettlement.com just looks scammy as hell. It's a pity there's not a .gov domain set up for this sort of thing - when there's a settlement, a court order gets issued for yahoo.settlements.gov to get set up.

Yep, it does look scammy as hell. I got an email from Yahoo about this settlement about a week ago and at first I thought it was spam.

From: info@service.comms.yahoo.net

Subject: Yahoo Security Breach Proposed Settlement

If you had a Yahoo account anytime in 2012 through 2016, a pending class action settlement may affect you.

A Class Action Settlement has been proposed in litigation against Yahoo! Inc. (“Yahoo”) and Aabaco Small Business, LLC (together, called “Defendants” in this notice), relating to data breaches (malicious actors got into system and personal data was taken) occurring in 2013 through 2016, as well as to data security intrusions (malicious actors got into system but no data appears to have been taken) occurring in early 2012 (collectively, the “Data Breaches”).

....

Re: Yahoo Customer Data Security Breach Litigation Settlement

#25

Post by willis936 »

cde-v wrote: post #22
koolba wrote: post #5

Earlier quoted context omitted.

Why do judges agree to forcing consumers to have useless product of credit monitoring in place to receive a cash payout? Can I set up a “virtual” credit monitoring that provides that type of service in name only to cover that requirement? Imagine paying $5 to claim you have credit monitoring for settlement purposes.

Yeah I would much rather have the $0.37 than credit monitoring.

I’m not sure if you’re sarcastic but I would much prefer $0.37 to credit monitoring.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#26

Post by lokoalex »

koolba wrote: post #5
iflywithbook wrote: post #2

"Under the terms of the Settlement, Yahoo has enhanced, or, through its successor in interest, Oath Holdings Inc. (“Oath”), continues to enhance its business practices that will improve the security of its users’ personal information stored on its databases. Defendants will also pay for a Settlement Fund of $117,500,000. The Settlement Fund will provide a minimum of two years of Credit Monitoring Services to protect…

Why do judges agree to forcing consumers to have useless product of credit monitoring in place to receive a cash payout? Can I set up a “virtual” credit monitoring that provides that type of service in name only to cover that requirement? Imagine paying $5 to claim you have credit monitoring for settlement purposes.

Its so that they can give their settlement value. Even if the value is crap.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#27

Post by willis936 »

jannes wrote: post #23
ceejayoz wrote: post #14

How long before an identity thief pays PR Newswire to run a story on data breach settlement and harvest all the PII requested on these sorts of settlement claim forms? yahoodatabreachsettlement.com just looks scammy as hell. It's a pity there's not a .gov domain set up for this sort of thing - when there's a settlement, a court order gets issued for yahoo.settlements.gov to get set up.

Yep, it does look scammy as hell. I got an email from Yahoo about this settlement about a week ago and at first I thought it was spam. From: info@service.comms.yahoo.net Subject: Yahoo Security Breach Proposed Settlement If you had a Yahoo account anytime in 2012 through 2016, a pending class action settlement may affect you. A Class Action Settlement has been proposed in litigation against Yahoo! Inc. (“Yahoo”) and…

Yahoo is a scam in its entirety. Even their support page feels like it exists to funnel personal information to spam databases.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#28

Post by ocdtrekkie »

magashna wrote: post #13
ocdtrekkie wrote: post #8

Earlier quoted context omitted.

I mean, you should have one from one of the many previous breaches. Also, arguably your credit card or mortgage company may be providing you enough monitoring to claim you have it. For those who suffered under TurboTax, Intuit offers a free credit monitoring service as well. Credit monitoring, like antivirus, is something you should have, but should not be paying for.

I would rather be less involved with these credit companies. I recently spent about a month getting some BS off my Experian account. Whenever you're on hold you need to sit through around 10 minutes of commercials for their data protection services. Experian. The company responsible for possibly the biggest data leak in history. Advertising data protection services. The balls of some companies

Equifax and Experian are not the same, although Experian has reported a smaller breach before, and of course, if you got credit monitoring from the Equifax breach, they have since offloaded you to Experian.

But the reality is: These companies already have your data, so being signed up so you can also see it isn't giving them any more information.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#29

Post by u801e »

ryanlol wrote: post #10
u801e wrote: post #9

Earlier quoted context omitted.

> Credit monitoring is snake oil. What we really need is to shift the burden of proof from the consumer to the lender. If the lender cannot establish beyond a reasonable doubt that they entered into a contact with the consumer, then the consumer can sue them. Just having the SSN, name, address of the consumer, etc. shouldn't be enough to prove the lender entered into a contact with the consumer.

>then the consumer can sue them For what? The consumer isn’t responsible anyway if the lender gets defrauded. Is the fraud in itself not enough of a punishment for the lender? I’d argue that the real problem here are the regulators who have shaped this broken system. Not the lack of punishments for existing within it. >Just having the SSN, name, address of the consumer, etc. shouldn't be enough to prove the lender en…

>> then the consumer can sue them

> For what?

For sending a bad report about the consumer they claim to have entered into a contract with to the credit bureaus.

> The consumer isn’t responsible anyway if the lender gets defrauded.

That's true, but the lender is responsible for what they report to the credit bureaus.

> Is the fraud in itself not enough of a punishment for the lender?

If they don't involve the actual consumer in their lack of due diligence, then sure.

> It isn’t. The lender enters into a contract with a fraudster and gets fucked. The lender is the victim, not the consumer.

If the lender involves the consumer by sending a bad report to the bureaus, then they have harmed the consumer.

Re: Yahoo Customer Data Security Breach Litigation Settlement

#30

Post by cameronbrown »

ceejayoz wrote: post #14

How long before an identity thief pays PR Newswire to run a story on data breach settlement and harvest all the PII requested on these sorts of settlement claim forms? yahoodatabreachsettlement.com just looks scammy as hell. It's a pity there's not a .gov domain set up for this sort of thing - when there's a settlement, a court order gets issued for yahoo.settlements.gov to get set up.

They always do these domains for settlements. It should probably be on .gov but there doesn't seem to have been many issues before.
Post reply on HN