All 3 Billion Yahoo Accounts Since 2013 Compromised

M

monkeymagick

[H]News
Joined
Jun 22, 2008
Messages
480
Don't want to sound the alarm, but the headline rings true. Ars Technica reports that every Yahoo account created since 2013, about 3 billion were compromised. Yahoo originaly estimated the August 2013 hack exposed close to 1 billion user accounts which at the time was the biggest data breach ever. I assume those numbers increased exponentially due to everyone and their dog having two extra accounts.

Yahoo left unchanged its estimates for a separate browser cookie-forging hack that took place in 2015 and 2016 and was carried out by the same state-sponsored attackers who participated in the 2014 breach. In its 2016 annual report, Yahoo said the forged cookies affected about 32 million accounts. There's no indication the 2013 breach and the cookie forging are connected or were carried out by the same attackers.
 
Last edited:
Is internet espionage and physical acts of war completely separate in our world today? What type of cyber crime would it take from a a state sponsored affiliate to actually call for a declaration of war from the affected state? We know that out NSA has gotten into virtually every network on the planet at some point, and that our own defense networks in the USA have been breached countless times. Banks have had money moved in and out of accounts fairly regularly. Would it take a large disaster involving human life for a state sponsored hacking to actually cross the line into the real world of acts of war?

At some point one of these large 'state sponsored' attacks are going to collect the wrong information or cost the wrong shareholder money and we will actually have. . . the rest . . . of the story.
 
Chinese chips are in nearly every device out there, particularly concerning is their networking equipment:

https://www.wired.com/2014/03/how-huawei-became-nsa-nightmare/

https://arstechnica.com/information...oftbank-to-shun-chinese-networking-equipment/

http://www.information-age.com/india-bans-chinese-network-equipment-1251593/https://www.reuters.com/article/us-...-huawei-zte-u-s-inroads-idUSBRE8960NH20121008

Personally, I think folks are insane for inviting Google and Amazon devices that CONSTANTLY listen into their homes. Seriously, what are they doing with that absolutely torrent of data; aside from targeting advertising.

Ok, time to trudge back to my shack in the backwoods and continue with my manifesto. Cheers.
 
The wording of the headline makes it sound like accounts created from 2013-on were affected. Reading the article, it appears that every single Yahoo account that existed at the time of the 2013 attack was compromised. I was going to come in here happy that mine was created in 01, but no that means that it was fully compromised. It explains the issues I had a few years back with websites I hadn't used in a while having sudden purchases. I've since changed damn near everything.
 
capt_cope said:
Wait... people still used yahoo in 2014? Next thing you know we're going to hear about a massive Ask Jeeves breach, exposing the searches of every user...
Click to expand...
you have to realize that yahoo was a search engine first then email.....people still you their email service.....i do but only for "junk" accounts / spam emailers.
 
Hallucinator said:
And yet Verizon BOUGHT Yahoo?
Click to expand...
For $4.5 billion....that's over $1 per breached account..think about that. This news is all coming out after the sale was complete. Something yahoo had was very important to Verizon i guess..........
 
SomeoneElse said:
For $4.5 billion....that's over $1 per breached account..think about that. This news is all coming out after the sale was complete. Something yahoo had was very important to Verizon i guess..........
Click to expand...

It's always the patents they want anyway.
 
fadedlogic said:
Chinese chips are in nearly every device out there, particularly concerning is their networking equipment:

https://www.wired.com/2014/03/how-huawei-became-nsa-nightmare/

https://arstechnica.com/information...oftbank-to-shun-chinese-networking-equipment/

http://www.information-age.com/india-bans-chinese-network-equipment-1251593/https://www.reuters.com/article/us-...-huawei-zte-u-s-inroads-idUSBRE8960NH20121008

Personally, I think folks are insane for inviting Google and Amazon devices that CONSTANTLY listen into their homes. Seriously, what are they doing with that absolutely torrent of data; aside from targeting advertising.

Ok, time to trudge back to my shack in the backwoods and continue with my manifesto. Cheers.
Click to expand...
I've got some old IBM Selectric typewriter balls around somewhere if you need a couple....
 
If I remember right mine was created to play Yahoo Fantasy Football. If I remember right I had to have a yahoo account to play back in the day.

I feel bad for anyone that used it for critical stuff or their primary email address.

Mostly grandparents o_O
 
I use Yahoo as my junk account. TBH though, is Google much better?
 
Wellllllll, Equifax, this, gov breach. I am sure this can only improve my credit. Plz take my student debt ;)
Should get credit monitoring for life.
 
rive22 said:
I don't think I've ever had a yahoo account.
Click to expand...
It's the account I use to sign up to anything that I know is going to simply turn around and sell the email address to spammers. Hell looking at the account now I have over 6300 messages in my inbox, none of which are actually useful to me. It's just you can only mass delete emails 50 at a time, so it makes it a bit of an announce going through them all.
 
Wow, I don't even remember my yhaoo username and password. I has been so long, I never really used it as a primary account anyways.
 
i dont know what my yahoo password is as i use the yes/no login feature (works same as MS and sometimes asks me pick the number you see on screen, google is still basic gmail yes/no)

wish google and yahoo would implement a master recovery code like MS does (but slightly more securely as if you get into the security page you can revoke it and make a new one way to easy, it should have a time out of 30 days like the number change does)

as the recovery for yahoo and google and MS is still 1 factor password reset (if other email account or SMS is used)
 
I think a lot of people here seriously under value YAHOO. Do you even realize it still gets millions of unique visits daily and still millions of email users? In fact back before they got breached they toppled GOOGLE. By no means am I saying that their awesome but to discard them as a "joke" or "people still use them?" is further from the actual truth because they still bring in serious dough and have millions of users. Thinkt he same won't happen to GMAIL or HOTMAIL one day? No one is off limits these days.

Just saying!
 
You must log in or register to reply here.
Back
Top