Yahoo took its time investigating massive security breach

Yahoo disclosed the size of the breach seven weeks ago

FILE - In this July 19, 2016, file photo, flowers bloom in front of a Yahoo sign at the company's headquarters in Sunnyvale, Calif. Yahoo detected evidence that a hacker had broken into its computer network at least 18 months before launching an investigation that discovered personal information had been stolen from about 500 million user accounts. The timeline outlined in a regulatory filing late Wednesday, Nov. 9, 2016, raises further questions about why it took Yahoo so long to realize the severity of its security breakdown. It could also jeopardize a $4.8 billion deal with Verizon. (AP Photo/Marcio Jose Sanchez, File)
FILE - In this July 19, 2016, file photo, flowers bloom in front of a Yahoo sign at the company's headquarters in Sunnyvale, Calif. Yahoo detected evidence that a hacker had broken into its computer network at least 18 months before launching an investigation that discovered personal information had been stolen from about 500 million user accounts. The timeline outlined in a regulatory filing late Wednesday, Nov. 9, 2016, raises further questions about why it took Yahoo so long to realize the severity of its security breakdown. It could also jeopardize a $4.8 billion deal with Verizon. (AP Photo/Marcio Jose Sanchez, File)

SAN FRANCISCO (AP) — Yahoo detected evidence that a hacker had broken into its computer network at least 18 months before launching an investigation that discovered personal information had been stolen from about 500 million user accounts.

The timeline outlined in a regulatory filing raises further questions about why it took Yahoo so long to realize the severity of its security breakdown. It also could provide Verizon Communications with reason to revise or terminate its $4.8 billion deal to buy Yahoo’s online services.

Yahoo disclosed the size of the breach seven weeks ago. At that time, Yahoo traced its findings to an inquiry opened in late July, around the same time that Verizon announced its agreement to buy Yahoo’s email service, digital advertising tools and sections devoted to news, sports, finance and entertainment.

Verizon says it wasn’t informed of the hacking attack until a few days before Yahoo told its users in late September.



In its regulatory filing late Wednesday, Yahoo acknowledged the company first became aware of the hack in late 2014. The Sunnyvale, California, company said its board is now investigating how much was known back in 2014.

Verizon declined to comment on Yahoo’s latest disclosure. The company’s executives have previously said Verizon is re-evaluating its deal with Yahoo because the breach could alienate a large swath of users who may rely on Yahoo’s email and other services less frequently in order to protect their privacy. If there is a user backlash, Yahoo’s services wouldn’t be worth as much to Verizon, which is counting on a large audience to sell more digital advertising.

Yahoo has sought to reassure its users that the hacker no longer has access to its computers. The company also has prompted users to change their passwords and security questions to protect their accounts.

In its regulatory filing, Yahoo Inc. also revealed that the hacker created computer coding known as “cookies” that would allow someone to view information in user accounts without the need for a password. The company also said it will analyze information turned over by the FBI from a hacker claiming it came from Yahoo accounts.

___

Copyright 2016 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s