Yahoo has sent out notices detailing that ‘all’ of its three billion accounts were impacted by the 2013 breach. They came up with this conclusion after investigators discovered new evidence. The original estimate was only one billion accounts being hacked.
Yahoo is now owned by Verizon which bought it for $4.5 billion. The discovery of the news evidence happened during the integrations of the companies.
“It is important to note that, in connection with Yahoo’s December 2016 announcement of the August 2013 theft, Yahoo took action to protect all accounts. The company required all users who had not changed their passwords since the time of the theft to do so. Yahoo also invalidated unencrypted security questions and answers so they cannot be used to access an account,” Yahoo said Tuesday.
Yahoo said it will begin notifying those impacted by the hack who wasn’t previously contacted.
This revelation is yet another blow to the confidence of Yahoo and now Verizon. Verizon received a $350 million discount purchasing due to the 2013 breach.
“Verizon is committed to the highest standards of accountability and transparency, and we proactively work to ensure the safety and security of our users and networks in an evolving landscape of online threats,” said Chandra McMahon, Chief Information Security Officer, Verizon. “Our investment in Yahoo is allowing that team to continue to take significant steps to enhance their security, as well as benefit from Verizon’s experience and resources.”
In 2103, the breach allowed email addresses, passwords, birth dates, telephone numbers and more to be stolen. The new revelation indicates stolen information did not include passwords in clear text, bank accounts, or payment card information.
Verizon is in the process of folding Yahoo in with AOL.