Endpoint
5/21/2013
06:14 AM
Tim Wilson
Tim Wilson
Quick Hits
50%
50%

IDs Of 22 Million At Risk Following Breach At Yahoo Japan

Yahoo Japan officials say they "can't deny the possibility" of epic data breach

As many as 22 million user IDs may have been stolen when an unauthorized user tried to gain access to the administrative system portal at Yahoo Japan.

"We don't know if the file was leaked or not, but we can't deny the possibility given the volume of traffic between our server and external" terminals, the company said in a statement late Friday.

Yahoo Japan said the data did not include passwords or the data necessary to verify a user's identity or reset passwords. The company said it has "updated its security measures" to prevent a repeat of the incident.

The company did not say exactly how the unauthorized access took place or how long the attack may have taken.

Yahoo Japan is 35.5 percent held by Japan's mobile phone operator SoftBank, and 34.7 percent held by U.S. Internet giant Yahoo! Inc.

Its popular portal Yahoo! Japan holds the top search engine position in Japan with market share of more than 50 percent.

Have a comment on this story? Please click "Add a Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message. Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-2130
Published: 2015-03-05
Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka B...

CVE-2014-9688
Published: 2015-03-05
Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users.

CVE-2015-0598
Published: 2015-03-05
The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693.

CVE-2015-0607
Published: 2015-03-05
The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a connecti...

CVE-2015-0657
Published: 2015-03-05
Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.