Updated at 7:00 p.m. ET
Yahoo says hackers stole names, email addresses, phone numbers, dates of birth and encrypted or unencrypted security questions and answers from more than 1 billion accounts.
In a statement posted to its website on Wednesday, the company said it had “taken steps to secure user accounts and is working closely with law enforcement.”
The statement continued:
“As Yahoo previously disclosed in November, law enforcement provided the company with data files that a third party claimed was Yahoo user data. The company analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, Yahoo believes an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts. …
“The investigation indicates that the stolen information did not include passwords in clear text, payment card data, or bank account information. Payment card data and bank account information are not stored in the system the company believes was affected.”
This is the second major breach of private user information Yahoo has announced in the past three months. In September, the company said information associated with at least 500 million user accounts had been stolen in 2014, as we reported.
That security breach allowed hackers to steal the same types of information the company thinks were stolen in this instance.
The company said that it believes the two incidents were distinct.
As it did in September, Yahoo created an FAQ page to answer questions from account holders.
In both cases, Yahoo said its outside forensics experts had connected at least some elements of the hacking to a “state-sponsored actor” but did not say which foreign government it believed had supported the hack.
Earlier this year, Verizon agreed to buy Yahoo for $4.8 billion. The purchase is supposed to be finalized early in 2017, but after the first hack was announced in September, Verizon said it would “evaluate” its potential impact on the deal.
On Wednesday, Verizon said in a statement to The Associated Press that it would review the “new development before reaching any final conclusions.”
In July, we published this statement in recognition of the work we needed to begin at CPR to confront issues of diversity, equity and inclusion in our newsroom and organization as a whole.
We know this work is urgent, and we are dedicated to doing it thoroughly and connecting it with our vision and mission to reach all and serve everyone in Colorado.
Here is an update on our progress over the last eight months.
It takes a good day’s drive to cover Colorado, but we’ll help you do it in a few minutes each morning. The Lookout daily email brings you a closer look at the issues that affect you with a rundown of important fact-based reporting — with a side of Colorado flavor.
In celebration of Women's History Month, we spotlight female artists, musicians, and composers making music and making history.