DOJ Charges Russian Agents in Yahoo BreachDOJ Charges Russian Agents in Yahoo Breach
Officers of Russia's FSB led the 2014 intrusion into Yahoo's network, according to grand jury indictments.
March 14, 2017

The US Department of Justice today announced indictments brought by a California grand jury in the case of the 2014 {complink 6518|Yahoo Inc.} breach, which affected 500 million accounts. Two officers of the Russian Federal Security Service (FSB) -- Dmitry Dokuchaev and Igor Sushchin -- were charged, along with Alexsey Belan of Russia and Karim Baratov, a Kazakh national living in Canada.
Belan is particularly noteworthy, having made the FBI's "Cyber Most Wanted" list in 2013. He had been arrested in Europe that year but escaped before extradition, according to the DOJ press release.
Baratov was arrested yesterday in Canada on a US provisional arrest warrant, Acting Assistant Attorney General Mary B. McCord noted during a press conference today.
Today's indictments do not involve the second, larger breach that Yahoo disclosed in December. That breach affected 1 billion accounts, and Yahoo believes it's separate from the 2014 incident. (See {doclink 729027}.)
The exposed accounts included some of "predictable interest" to the FSB, including those of Russian journalists and US and Russian government officials, the DoJ's press release states.
Due to the liability potential involved, the breaches have shaved $350 million off the {complink 5926|Verizon Communications Inc.} acquisition of Yahoo's core assets. That deal was originally priced at around $4.8 billion and is on track to close next quarter, the companies said in February. A $350 million discount is nice, but one report last fall said Verizon was hoping to take $1 billion off the price. (See {doclink 730456} and {doclink 726861}.)
— Craig Matsumoto, Editor-in-Chief, Light Reading
About the Author(s)
You May Also Like
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication Methods
Oct 26, 2023Modern Supply Chain Security: Integrated, Interconnected, and Context-Driven
Nov 06, 2023How to Combat the Latest Cloud Security Threats
Nov 06, 2023Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and Phishing
Nov 01, 2023SecOps & DevSecOps in the Cloud
Nov 06, 2023