www.theguardian.com Yahoo Confirms Breach of Over 1 Billion Accounts Linked to State-Sponsored Actors
Article Content
- •Yahoo's breach affects over 1 billion accounts, making it the largest in history.
- •The attack involved state-sponsored actors using forged cookies for unauthorized access.
- •Yahoo is mandating password changes for all affected users and has invalidated compromised cookies.
Yahoo has disclosed a massive data breach affecting more than one billion user accounts, which occurred in August 2013. This breach is separate from a previously reported incident in 2014 that compromised 500 million accounts. The company believes state-sponsored actors are involved, utilizing sophisticated methods to forge cookies that allowed unauthorized access without passwords. Affected data may include names, email addresses, phone numbers, dates of birth, and hashed passwords. Yahoo is notifying all impacted users and mandating password changes. The breach raises concerns about the company's security practices and could impact Verizon's acquisition deal. Forensic experts are still investigating the specifics of the intrusion, which remains unidentified.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Flickr in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…