author photo
By SecureWorld News Team
Tue | Oct 3, 2017 | 2:53 PM PDT

Call it another "integration surprise." 

yahoo-more-breached

They always seem to pop up, right?

However, this one is in a class by itself. And it all ties back to Yahoo's breach from 2013. 

The breach tally just went from 1 billion to 3 billion accounts.

Hot off the presses, here is the company statement from October 3, 2017:

"Subsequent to Yahoo’s acquisition by Verizon, and during integration, the company recently obtained new intelligence and now believes, following an investigation with the assistance of outside forensic experts, that all Yahoo user accounts were affected by the August 2013 theft. While this is not a new security issue, Yahoo is sending email notifications to the additional affected user accounts. The investigation indicates that the user account information that was stolen did not include passwords in clear text, payment card data, or bank account information. The company is continuing to work closely with law enforcement."

Verizon's CISO comments on the Yahoo breach

Also part of the online statement is a comment from Verizon's CISO, Chandra McMahon:

"Verizon is committed to the highest standards of accountability and transparency, and we proactively work to ensure the safety and security of our users and networks in an evolving landscape of online threats. Our investment in Yahoo is allowing that team to continue to take significant steps to enhance their security, as well as benefit from Verizon's experience and resources."

The company also updated its account security FAQ section.

And here's something we don't recall seeing before: the company tries to combat a wave of phishing that is likely coming as a result of this announcement:

yahoo-new-breach-details

Comments