After months of speculation, Yahoo has finally admitted it knew about a massive data breach as far back as 2014.
The tech company had previously claimed it only "recently" found out about the leak of 500 million users accounts. Independent experts are now investigating exactly how much was known and by whom, Yahoo said.
They are looking at evidence that indicates a “state-sponsored actor” breached Yahoo’s system and could have gained user data by creating “cookies” that bypassed password protection, the company said in a regulatory filing. Yahoo said it doesn’t believe it is currently possible for the attackers to forge valid Yahoo Mail cookies.
Verizon, which is in the process of buying Yahoo has said it could lower its $4bn purchase price, or even withdraw the bid altogether if more damaging information was revealed.
Verizon was only informed of the hack a week before it was publicly exposed in September, despite the fact Yahoo had known for two years.
“As a result of facts relating to the security incident [Verizon] may seek to terminate the stock purchase agreement or renegotiate the terms of the sale,” it said.
In further revelations, Yahoo said it is investigating a new claim that user account data was obtained by a hacker, the latest security challenge for the company as it prepares for the planned acquisition.
Gadgets and tech news in pictures
Gadgets and tech news in pictures
1/10 New HTC Desire 626 handset launch
HTC has launched its latest Desire 626 handset with the Sense 7 software which automatically detects whether you’re at work, at home or on-the-go and alters its theme to suit your location. This advanced technology intelligently analyses your favourite photos to modify the look and feel of your apps, allowing you to modify the colour scheme and backgrounds – the ultimate in personalisation
2/10 Nasa confirms Mars water discovery
Nasa has announced that it has found evidence of flowing water on Mars. Scientists have long speculated that Recurring Slope Lineae — or dark patches — on Mars were made up of briny water but the new findings prove that those patches are caused by liquid water, which it has established by finding hydrated salts.
3/10 Customers wait in line at the Apple Store in Paris to get their hands on the iPhone 6s
Several hundred camped outside the London store in Covent Garden. The 6s will have new features like a vastly improved camera and a pressure-sensitive “3D Touch” display
4/10 Bloodhound SSC: The most powerful ever made is shown off to the public
The car is displayed at Downing Street, when the team visited David Cameron to demonstrate the project.
5/10 Lunar eclipse threatens Nasa technology
Artist's rendering of Nasa's LRO spacecraft, which will have to withstand a rapid drop in temperature during an upcoming lunar eclipse that could lead to it shutting down.
6/10 Mobile phone bills could rocket up after Ofcom announced that the fees it charges to phone operators will be trebled
The regulator will now charge far more to phone companies for using the mobile spectrum — and though it says that fee will not be passed on to customers, experts have said that prices are likely to go up.
2007 Getty Images
7/10 New iPhone 6s rose gold
Apple has released a bright pink new iPhone 6s — likely the only way that you’ll be able to tell that someone has the new handset. The company released the new phone with much fanfare, but almost all of the changes — a new camera and pressure-sensitive display — were on the inside. The only new noticeable addition to the phone’s look is the very pink rose gold colour, and a tiny “S” on the back. The new handsets will be released on September 25
8/10 iPad Pro
Apple has launched a huge new iPad, which it hopes can bring the tablet to offices and designers. But it unveiled it with an Apple-designed stylus — an idea that was famously mocked by late Apple founder Steve Jobs
9/10 Apple TV
Apple has introduced the new Apple TV
10/10 Apple Pencil
Apple has introduced the new Apple Pencil
Police began sharing certain information on Monday that was provided by a hacker who claimed it was Yahoo user account data.
“It was a good day to bury the news,” Dr Joss Wright from the University of Oxford's Internet Institute told the BBC, referring to the fact that Yahoo's filing had coincided with Donald Trump winning the US election.
“Because there's rarely a large visible event when a breach happens, companies can choose not to report them hoping that they can fix the problem internally.Reuse content