Yahoo Now Admits 2013 Breach Affected All 3 Billion Accounts

SUNNYVALE (CBS SF) — Yahoo admitted Tuesday that a security breach in 2013 affected all three billion accounts, triple the number originally reported.

Last year, the Sunnyvale-based internet company said one billion user accounts were impacted.

According to a statement by Verizon, which acquired Yahoo earlier this year, “the company recently obtained new intelligence and now believes, following an investigation with the assistance of outside forensic experts, that all Yahoo user accounts were affected by the August 2013 theft.”

Yahoo said in Tuesday’s statement that stolen information did not include passwords in clear text, payment card data or bank account information. At the time of the previous disclosure, Yahoo said stolen information may have included names, email address, phone numbers and birth dates, along with security questions and answers.

The company said it is “continuing to work closely” with law enforcement.

Yahoo said it would notify the additional affected user accounts.

A separate hack of Yahoo in 2014 impacted at least 500 million users. In that breach, the company said email addresses, birth dates, answers to security questions and other personal information may have been stolen.

Earlier this year, the Department of Justice indicted two Russian intelligence agents and two hackers in connection with the 2014 breach.

This site uses cookies, tokens, and other third party scripts to recognize visitors of our sites and services, remember your settings and privacy choices, and — depending on your settings and privacy choices — enable us and some key partners to collect information about you so that we can improve our services and deliver relevant ads.

By continuing to use our site or clicking Agree, you agree that CBS and our key partners may collect data and use cookies for personalized ads and other purposes, as described more fully in our privacy policy. You can change your settings at any time by clicking Manage Settings.