Yahoo Breach Could Be as High as 1-3 Billion
Posted by: Timothy Weaver on 10/01/2016 10:56 AM
[
Comments
]
Yahoo claims that the breach which resulted in the loss of 500 million users info was a "state-sponsored actor".
However, InfoArmor analyzed the breach and stated that the data breach was the work of seasoned cyber criminals who took the information and sold it to an Eastern European nation-state.
That was not all that Info Armor discovered. The report goes on to claim that the data breach could well have affected between 1 billion and 3 billion users.
Yahoo's backend only uses one server for authentication. All usernames and passwords go to this one central database to ensure they are valid. That central database is what the hackers compromised.
The hacker not only stole the usernames and passwords, but also lifted personal info such as dates of birth, phone numbers, hashed passwords and unencrypted security answers.
The revelation of the massiveness of the breach may compromise Yahoo's ability to be purchased by Verizon.
Source: The Hacker News
However, InfoArmor analyzed the breach and stated that the data breach was the work of seasoned cyber criminals who took the information and sold it to an Eastern European nation-state.That was not all that Info Armor discovered. The report goes on to claim that the data breach could well have affected between 1 billion and 3 billion users.
Yahoo's backend only uses one server for authentication. All usernames and passwords go to this one central database to ensure they are valid. That central database is what the hackers compromised.
The hacker not only stole the usernames and passwords, but also lifted personal info such as dates of birth, phone numbers, hashed passwords and unencrypted security answers.
The revelation of the massiveness of the breach may compromise Yahoo's ability to be purchased by Verizon.
Source: The Hacker News
Comments
