Live data from Hacker News

Yahoo Triples Estimate of Breached Accounts to 3B

wsj.com

11–20 of 311 posts

Re: Yahoo Triples Estimate of Breached Accounts to 3B

#14

> A massive data breach at Yahoo in 2013 was far more extensive than previously disclosed, affecting all of its 3 billion user accounts, new parent company Verizon Communications Inc. said on Tuesday. Imagine the buyers remorse

Does anyone have insight on how this works? Do you just sue the pants off of the execs, or the lawyers who did due diligence, or the SREs maybe? Do the clawback the difference in goodwill + legal costs from the selling investors?

Is there recourse at all?

It'll probably the some poor schmuck SRE getting the blame, like always, right?

Re: Yahoo Triples Estimate of Breached Accounts to 3B

#16

3 billion - we live in an age where half the population of the earth can exist on a service, and everyone is vulnerable. Yes, a good chunk of these are probably duplicates for business / spam / anon accounts, but this is where the world is trending. How long is it until facebook or google have a massive breach?

Well I would say close to half of those accounts are duplicate - as in not 1 account per person.

Re: Yahoo Triples Estimate of Breached Accounts to 3B

#17
post #7

Bypass - https://www.facebook.com/flx/warn/?u=https%3A%2F%2Fwww.wsj.c...

It's a very short article, here are the salient bits:

===

A massive data breach at Yahoo in 2013 was far more extensive than previously disclosed, affecting all of its 3 billion user accounts...

...

...Oath ... said the company determined last week that the break-in was much worse than thought, after it received new information from outside the company. ... declined to elaborate on the source of that information. Compromised customer information included usernames, passwords, and in some cases telephone numbers and dates of birth...

...

The number of individuals affected by the 2013 attack is smaller than 3 billion, because some people​ have multiple accounts​ ... Oath will immediately begin notifying the users who own the additional roughly 2 billion accounts. That is expected to take several days and occur via email...

===

Emphasis mine re: details of disclosed info.

Re: Yahoo Triples Estimate of Breached Accounts to 3B

#18

Just an ancillary comment but Yahoo has a whole bunch of password requirements. So much so that my passwords don't cut it and I can never remember my password. And/or I need to validate every new device. Is this all just for show? Its insult to injury that they force all these things and then they get broken into.

Hopefully your experience is characteristic of most yahoo users, and this breach is less effective because people are using a unique password for their breached account.

Re: Yahoo Triples Estimate of Breached Accounts to 3B

#19
I think the issue right now is that private user information is viewed as an asset, not a liability. If we could find a way to make it more of a liability, companies would be less likely to collect it just for the sake of having it, and they would be more proactive in securing it.

Re: Yahoo Triples Estimate of Breached Accounts to 3B

#20

I think the issue right now is that private user information is viewed as an asset, not a liability. If we could find a way to make it more of a liability, companies would be less likely to collect it just for the sake of having it, and they would be more proactive in securing it.

User accounts? Really? This is Yahoo we’re talking about. You really do need user accounts to run an email service
Post reply on HN