Yahoo says newly discovered hack hit one billion users

PanARMENIAN.Net - Yahoo said Wednesday, December 14 more than a billion users may have had data stolen in a hack dating back to 2013 -- separate from its previously disclosed breach affecting 500 million, AFP reports.

In a huge blow to the struggling internet pioneer, Yahoo said it made the discovery as it was investigating what was already the largest data breach of a single company.

"Yahoo believes an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts," it said in a statement.

Yahoo said this case "is likely distinct from the incident the company disclosed on September 22, 2016."

The news comes with Yahoo in the process of selling its core operating assets to Verizon for $4.8 billion.

The breach disclosed in September had already threatened to derail the deal with Verizon or result in a reduction in the price.

In November, Yahoo disclosed that as part of its investigation into the prior breach, it had received data files from law enforcement "that a third party claimed was Yahoo user data."

Using outside forensic experts, Yahoo now confirms that this was indeed user data but added that it "has not been able to identify the intrusion associated with this theft."

Yahoo said in September it believed the breach of information on 500 million users was "state sponsored" but some analysts have questioned this theory.

The stolen user account information in the newly disclosed breach may have included names, email addresses, telephone numbers, dates of birth, "hashed" passwords and, in some cases, encrypted or unencrypted security questions and answers, Yahoo said.

The hackers did not obtain passwords in clear text, payment card data, or bank account information, it said.