Yahoo Is Expected To Confirm A Massive Data Breach

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
According to "several sources close to the situation" Yahoo is about to confirm that massive data breach from earlier this summer that impacted over 200 million users. No one really knows the extent of the breach or why it has taken so long for Yahoo to acknowledge that there was a breach in the first place. Hell, the company hasn't even told users to reset their passwords yet. :(

Yahoo is poised to confirm a massive data breach of its service, according to several sources close to the situation, hacking that has exposed several hundred million user accounts. Earlier this summer, Yahoo said it was investigating a data breach in which hackers claimed to have access to 200 million user accounts and one was selling them online. “It’s as bad as that,” said one source. “Worse, really.”
 
I think we're going to just get Fight Club'd eventually. Credit card systems hacked, no one knows who owes anybody etc.
 
I wonder what percentage of those 200 million accounts are spam accounts. Half?
 
  • Like
Reactions: rat
like this
I wonder what the delay was on this, didn't Yahoo just get sold recently? Maybe they wanted to keep the data breach on the downlow until things were finalized.

Luckily enough, I haven't used my Yahoo account since the YahooChat days. Met my first girlfriend on there too!
 
I killed off my 19 year old Yahoo account at the beginning of the year. Guess that was wise.
 
I knew it. I've been telling people for over a year that there is either a major breach at Yahoo or somebody is working on the inside to sell account information. I was seeing way too many compromised Yahoo accounts for it to be just easy mode password guessing. This is going to be big. Huge.

I tell people to watch out for companies that are circling the drain because they are ripe for hacking, social engineering, and bribery. When a company starts losing money, they attempt to "trim the fat" and IT security is near the top of that list.
 
My old Yahoo acct that I didnt remember having was compromised. but because the hackers were trying to get into it from some other portal I was being notified with my current email account. After that, I just shut down the acct and moved on with my life. I didnt realize this was something that Yahoo hasn't admitted too yet.

There needs to be policy in place that punished this sort of behavior. If I was notified of the attempted access to my account who knows how much deep they could have gone? Add to that, Yahoo staying quiet about it and I would say it's borderline criminal negligence.
 
Gweenz said:
I knew it. I've been telling people for over a year that there is either a major breach at Yahoo or somebody is working on the inside to sell account information. I was seeing way too many compromised Yahoo accounts for it to be just easy mode password guessing. This is going to be big. Huge.

I tell people to watch out for companies that are circling the drain because they are ripe for hacking, social engineering, and bribery. When a company starts losing money, they attempt to "trim the fat" and IT security is near the top of that list.
Click to expand...

How the @#$%@#%@# does this happen? Basic password security dictates that you ONLY STORE THE HASH OF THE PASSWORD ON THE DATABASE. That way if the database is compromised, the hash code is useless. Putting in a hash as a password doesn't work.

Is yahoo honestly that incompetent? Or were they targets of downgrade attacks (FREAK etc...) that allowed passwords to be hacked from forced lower security protocols?

Now if you excuse me I have some passwords to change. :-/
 
Inu said:
I think we're going to just get Fight Club'd eventually. Credit card systems hacked, no one knows who owes anybody etc.
Click to expand...

And those of us who are in IT can just sit back and watch as the world burns because the idiots in upper management did not heed our warnings and recommendations as far as security goes.
 
Inu said:
I think we're going to just get Fight Club'd eventually. Credit card systems hacked, no one knows who owes anybody etc.
Click to expand...

You mean, like Mr. Robot? The problem is, these hackers are after the data usually, not destroying the records.

That type of Robin Hood cyber activist group doesn't appear to exist on a large enough scale to pull that off.

I don't shed a tear when a bank is hit because banks have become so morally corrupt in their practices that it's sickening. They've shifted from loan-based revenues (e.g. giving loans to small businesses and making a return on the interest) to just nickel and diming everyone. It hits the poorest the hardest because the system is rigged so you basically have to have a bank account for many things - then they pull shit like most-expensive queuing to jam your account with overdrafts.

It's like this because we've allowed them to get so big that each can carve out a sector and run the same policies, there's no real competition that way.
 
Last edited:
Spidey329 said:
You mean, like Mr. Robot? The problem is, these hackers are after the data usually, not destroying the records.

That type of Robin Hood cyber activist group doesn't appear to exist on a large enough scale to pull that off.

I don't shed a tear when a bank is hit because banks have become so morally corrupt in their practices that it's sickening. .
Click to expand...

You don't have to convince me banks nickle and dime people to death. But the average bank account size has to be over $3600 for the average bank to break even on the investments with it. This is due to overhead (programmers, dividends, mailings, disclosures, accounting, computer hardware, branch offices, and ATMs), and regulations (auditing cost and FDIC/NCUSIF insurance) (Remember they can only leverage a certain portion of your funds by banking rules) A lot of people don't have $3600 in their accounts.

You're better off with a credit union as they don't have stock holders to pay out, therefore they can give you a better deal. But you have to deal with the lack of services (ATM locations or lack of advanced services like a good web interface)

But if you rob banks, you are not only robbing the bank's money, but the money of mom, pop, and Joe public.
 
Last edited by a moderator:
DigitalGriffin said:
You don't have to convince me banks nickle and dime people to death. But the average bank account size has to be over $3600 for the average bank to break even on the investments with it. This is due to overhead (programmers, dividends, mailings, disclosures, accounting, computer hardware, branch offices, and ATMs), and regulations (auditing cost and FDIC/NCUSIF insurance) (Remember they can only leverage a certain portion of your funds by banking rules) A lot of people don't have $3600 in their accounts.

You're better off with a credit union as they don't have stock holders to pay out, therefore they can give you a better deal. But you have to deal with the lack of services (ATM locations or lack of advanced services like a good web interface)

But if you rob banks, you are not only robbing the bank's money, but the money of mom, pop, and Joe public.
Click to expand...


Isn't it something like 90 or 95% of the funds you deposit that they can leverage? You deposit 3600, and they can loan 3420, which is then deposited by that person, and the bank then can loan 3,078 an so on...
 
I'm too lazy and not especially motivated to change the password to a whole bunch of accounts created back when I was using ATT ISP email. They are not my main anyways. I'll hide behind the massive amounts of accounts that was stolen and take my chances. I might get to it eventually.
 
Growing up in the deep south, I had always heard that a yahoo was an idiot so I never had an account with them.:rolleyes:
 
they got my wow account after they got one of my yahoo accounts. china hackers if they haven't said yet.
 
Biznatch said:
Isn't it something like 90 or 95% of the funds you deposit that they can leverage? You deposit 3600, and they can loan 3420, which is then deposited by that person, and the bank then can loan 3,078 an so on...
Click to expand...
My understanding (which is probably incorrect) is that they only have to have 5-10% of the funds they loan on deposit. So you deposit $1,000, they can loan out $10,000 against it, once $1,000 of that is paid off, they can loan another $10,000 (since they now have your $1,000 and the $1,000 from loan payment).
 
An article I read stated this hack occurred back in 2014. Wow, it took these yahoo's this long to announce/investigate this matter? Yikes.
 
Or possibly this was the latest list of clients they could get ahold of. Just a guess.
 
You must log in or register to reply here.
Back
Top