SUNNYVALE (CBS SF / CNN) — Yahoo could pay $117.5 million to settle massive data breaches that compromised personal information, including email addresses and passwords.
The proposed settlement from the Sunnyvale-based company was announced on Tuesday, but still needs to be approved by US District Judge Lucy Koh.
Earlier this year, a different version of the class-action settlement was rejected by Koh, who wanted to see more benefit to consumers and a specific settlement amount.
Yahoo was hit by multiple data breaches from 2013 to 2016. The 2013 breach affected every single customer account that existed at the time, which totaled 3 billion. Yahoo previously said names, email addresses and passwords were compromised but not financial information.
“We believe that the settlement demonstrates our strong commitment to security,” a Verizon Media spokesperson told CNN Business.
Since June 2017, Yahoo’s parent company has boosted its security budget, increased the number of employees in its information security group and enhanced training, policies and procedures related to security, according to court documents.
© Copyright 2019 CBS Broadcasting Inc. All Rights Reserved. This material may not be published, broadcast, rewritten. CNN contributed to this report.