Yahoo has tripled down on what was already the most noteworthy knowledge breach in historical past, saying it affected all three billion accounts on its service, not the 1 billion it exposed late last yr.
The company formally announced Tues. in that it is offering notice to further user accounts affected by the Aug. 2013 knowledge theft.
The breach was previously acknowledged by the company in Dec. . The- stolen info included names, email addresses, phone numbers, birthdates & safety questions & answers.
Following its acquisition by Verizon in Jun., Yahoo states, it obtained new intelligence while investigating the breach with assist from outside forensic specialists. It states the stolen customer info didn’t embody passwords in clear textual content, payment card knowledge or checking account info.
Yahoo had already required users to alter their passwords & invalidate safety questions in order in that they could not be used to hack in to accounts.
“Whether or not it is 1 billion or three billion is basically immaterial. Assume it affects you,” stated Sam Curry, chief safety officer for Boston-based firm Cybereason. “Privacy is really the victim right here.”
The disclosure is additionally a huge embarrassment for Verizon, which has just started running TV ads for its new subsidiary Oath, which can contain Yahoo & AOL services.