Yahoo says all its users (three billion accounts) were hacked in 2013

If you had a Yahoo account in 2013, your data was stolen. We continue to know the details of the biggest computer attack in history and are becoming more and more hallucinating. Yahoo had already admitted that one billion users were affected by the hack and now triples that figure to the authorities.

“After the acquisition of Yahoo by Verizon and during the integration [in a new company called Oath], the company has obtained new intelligence and now believes, after an investigation with the help of external forensic experts, that all the user accounts of Yahoo [three billion] were affected by the August 2013 attack,” the company told the Securities and Exchange Commission .

Fortunately, while some personal data were compromised, database passwords were encrypted and no cards or bank accounts were leaked. The stolen information may include names, email addresses, phone numbers, and birth dates. In some cases, encrypted or unencrypted security questions and answers were also filtered.

The attack was attributed to an agent. Accessing the company’s internal code, tampering with cookies to access email accounts for certain targets and placing fraudulent links in Yahoo’s search results.

Yahoo already required the one billion users who believed they had been affected to change their passwords and security questions. Now these changes will also be required for all other affected accounts.

Yahoo’s is the biggest data leak in history.

MySpace – 359 million accounts: The theft occurred in 2008, the database went on sale in May 2016. Passwords are encrypted with SHA-1, a hash that is considered unsafe.

LinkedIn – 164 million accounts: Theft occurred in 2012, credentials went on sale in May 2016. Passwords were made with SHA-1 unsalted, a very insecure encryption.

Adobe – 152 million accounts: The robbery occurred in October 2013. The company gave a figure of just under three million users, then it was discovered that the attack affected 152 million. Many of the passwords could be decrypted.

Other major computer attacks include eBay (145 million accounts), PlayStation Network (77 million accounts) and Evernote (50 million accounts).

But the list does not end here. Blizzard, Ubisoft, AT & T, Facebook or Apple are some of the big companies whose services have ever fallen victim to hackers.

Advertisements