The company sent a warning to users about forged cookies used in a third data breach originally reported in December 2016.

Dark Reading Staff, Dark Reading

February 16, 2017

1 Min Read

Yahoo is sending messages to some users alerting them to the use of forged cookies to access their data in a third breach of customer accounts in 2015-2016, CNBC reports. Some of these hacks are attributed to a "state-sponsored actor" also involved with the 2014 Yahoo breach in which 500 million accounts were compromised.

Yahoo did not reveal the number of accounts affected by the third breach but confidential data, including email addresses and security details, were compromised in the incident disclosed last December.

A company spokesperson said: "The investigation has identified user accounts for which we believe forged cookies were taken or used. Yahoo is in the process of notifying all potentially affected account holders."

The three incidents have been bad news for Yahoo, particularly because the company has been in a takeover deal with Verizon Communications. Bloomberg reports the breach disclosures have allowed Verizon to renegotiate the deal and reduce the decided purchase price of $4.8 billion by $250 million.

Click CNBC for details.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights