Investigation on Yahoo online security breach accelerates

epa05552697 The Yahoo logo is pictured on a computer monitor in Taipei, Taiwan, 23 September 2016. According to news reports on 23 September, around 500 million Yahoo account users information had been stolen or hacked on its network in 2014.  EPA/RITCHIE B. TONGO

 

Bloomberg

The US officials are planning to charge four people abroad related to the hacking attacks against Yahoo! Inc., according to a person briefed on the matter.
The Justice Department is accusing them of participating in massive online security breaches that compromised hundreds of millions of user accounts, said the person, who asked not to be identified because it was a sensitive legal matter. The hacks came to light last year and threatened to derail the sale of Yahoo’s web operations to Verizon Communications Inc.
The US had planned to arrest one of the people in Canada as soon as Tuesday, the person said. Additional details weren’t available, and Canadian authorities didn’t immediately respond to requests for comment.
Three of the suspects are believed to be in Russia, according to the person. Representatives
of Sunnyvale, California-based Yahoo and the Justice Department declined to comment.
The Justice Department is holding a press conference at 11:30 a.m. in Washington, D.C.
The security breach, which happened years earlier, was revealed almost five months after Verizon’s initial offer in July to acquire Yahoo’s key internet assets including its finance, sports and other websites.
Verizon then insisted on a better deal and ultimately, trimmed its offer price by $350 million to $4.48 billion. Yahoo has been afflicted by two major breaches in recent years. The company said in December that cyber-thieves in 2013 siphoned information including users’ email addresses, scrambled account passwords and dates of birth.
The stolen data could allow criminals to go after more sensitive personal information elsewhere online.
Earlier in September, Yahoo disclosed another breach dating back to 2014 that had affe-
cted about 500 million customer accounts.
The company hasn’t been able to identify the intruders associated with the 2013 breach, according to a filing this month. Yahoo also has said it believes the thief in the 2014 hack was a “state-sponsored actor,” though two people familiar with the matter have said it wasn’t certain a nation-state was involved.
The hacks recently led to management changes at Yahoo. General Counsel Ronald Bell left the web portal after the company found its legal team had had enough information about the security breaches to warrant further inquiry, but didn’t sufficiently pursue it. Chief Executive Officer Marissa Mayer didn’t receive a cash bonus last year. A committee found no intent to suppress information about the hacks, but said key executives should have done more when the issues was discovered.
The breaches have resulted in millions of dollars in legal and investigative costs, according to company filings, and spurred more than 40 lawsuits.
Yahoo also continues to work with the US Securities and Exchange Commission, Federal Trade Commission, the Manhattan US Attorney’s Office, and two state attorneys general on related inquiries.

Leave a Reply

Send this to a friend