Careers & People
3/3/2017
09:27 AM
50%
50%

Yahoo CEO Punished for Data Breaches

Marissa Mayer will be denied her annual bonus of around $2 million and also forgoes annual stock award worth millions.

Yahoo CEO Marissa Mayer will pay a penalty for the two breaches the company suffered in 2013 and 2014 by being denied her annual bonus of around $2 million and forgoing her annual stock award worth millions of dollars, Fox News reports. Yahoo’s general counsel Ronald Bell too was punished, having to resign without getting his severance pay.

An internal investigation into the breaches has held the executives responsible for failing to conduct a deep probe into the security lapses once revealed, alleging the executives “failed to act sufficiently.” The report also called out the legal department for failing to act immediately, which caused the breaches to not be “properly investigated and analyzed at the time.”

The data breaches, reported by Yahoo in 2016, compromised over 1 billion user accounts and cost the company $350 million after Verizon reduced its takeover deal price. Over 40 lawsuits have been filed against the company and the SEC and FTC are investigating the incidents.

In her defense, Mayer says she tried to set things right as soon as she learnt about the breaches.

Full story on Fox News.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
followersinsta
100%
0%
followersinsta,
User Rank: Apprentice
3/3/2017 | 6:17:52 PM
followers
With the amount of data that is affected in a breach, this penalty is very resonable
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
3/3/2017 | 2:51:54 PM
Breaches Affect Acquisitions
This is a perfect example of how breaches and security related events can affect acquisitions. This is where the practice of using market data to justify the potential direct cost of these events can be useful and in the long run save the company money.
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.