© 2024 Western New York Public Broadcasting Association

140 Lower Terrace
Buffalo, NY 14202

Mailing Address:
Horizons Plaza P.O. Box 1263
Buffalo, NY 14240-1263

Buffalo Toronto Public Media | Phone 716-845-7000
WBFO Newsroom | Phone: 716-845-7040
Your NPR Station
Play Live Radio
Next Up:
0:00
0:00
0:00 0:00
Available On Air Stations

Yahoo Says Hackers Stole Information From More Than 1 Billion Accounts

A Yahoo sign at the company's headquarters in Sunnyvale, Calif. The company has announced a hacking of user accounts that happened in 2013, but it says payment card information was not accessed.
Marcio Jose Sanchez
/
AP
A Yahoo sign at the company's headquarters in Sunnyvale, Calif. The company has announced a hacking of user accounts that happened in 2013, but it says payment card information was not accessed.

Updated at 7:00 p.m. ET

Yahoo says hackers stole names, email addresses, phone numbers, dates of birth and encrypted or unencrypted security questions and answers from more than 1 billion accounts.

In a statement posted to its website on Wednesday, the company said it had "taken steps to secure user accounts and is working closely with law enforcement."

The statement continued:

"As Yahoo previously disclosed in November, law enforcement provided the company with data files that a third party claimed was Yahoo user data. The company analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, Yahoo believes an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts. ...

"The investigation indicates that the stolen information did not include passwords in clear text, payment card data, or bank account information. Payment card data and bank account information are not stored in the system the company believes was affected."

This is the second major breach of private user information Yahoo has announced in the past three months. In September, the company said information associated with at least 500 million user accounts had been stolen in 2014, as we reported.

That security breach allowed hackers to steal the same types of information the company thinks were stolen in this instance.

The company said that it believes the two incidents were distinct.

As it did in September, Yahoo created an FAQ page to answer questions from account holders.

In both cases, Yahoo said its outside forensics experts had connected at least some elements of the hacking to a "state-sponsored actor" but did not say which foreign government it believed had supported the hack.

Earlier this year, Verizon agreed to buy Yahoo for $4.8 billion. The purchase is supposed to be finalized early in 2017, but after the first hack was announced in September, Verizon said it would "evaluate" its potential impact on the deal.

On Wednesday, Verizon said in a statement to The Associated Press that it would review the "new development before reaching any final conclusions."

Copyright 2021 NPR. To see more, visit https://www.npr.org.

Rebecca Hersher (she/her) is a reporter on NPR's Science Desk, where she reports on outbreaks, natural disasters, and environmental and health research. Since coming to NPR in 2011, she has covered the Ebola outbreak in West Africa, embedded with the Afghan army after the American combat mission ended, and reported on floods and hurricanes in the U.S. She's also reported on research about puppies. Before her work on the Science Desk, she was a producer for NPR's Weekend All Things Considered in Los Angeles.