SEC probes Yahoo's response to billion-user hack

Engadget Job Board

Director of Engineering at Shopkick

Shopkick - Redwood City, CA, United States

Engadget Backend Developer at Engadget

Engadget - San Francisco, CA, United States

Technical Project Manager at Ampersand & Ampersand

Ampersand & Ampersand - London, United Kingdom sec-probes-yahoo-and-039;s-response-to-billionuser-hack photo 1 Shutterstock

The SEC has this thing about companies keeping secrets, especially if those secrets could hurt investors. Yahoo, meanwhile, suffered two significant hacks in recent years, but dragged its feet in telling everyone about them. So it should be no surprise that regulators are now apparently investigating the moribund company to determine any wrongdoing.

The story comes from the Wall Street Journal's cadre of anonymous people familiar with the matter, who say that the investigation is at its earliest stage. The paper says that the SEC is looking to use Yahoo as a very public whipping boy for its potential refusal to make a material disclosure.

Back in 2011, the commission issued vague guidance about how, and when, companies should make declarations about their data being breached. Target, for instance, took a couple of weeks to announce its wide-ranging 2013 breach that involved people's credit card numbers.

At the time, the SEC found that delay to be reasonable, but there's a difference between a couple of weeks and the several years it took for Yahoo to come clean. One question that will be asked is how much Yahoo executives knew and understood about the 2014 breach when it came to their attention.

After all, plenty of things happened between the company finding out about the deal and when it chose to disclose that information to the public. The fact that Verizon had agreed to buy the business in the summer, but this rather material news was held back until fall and winter doesn't, uh, look great.

*Verizon has acquired AOL, Engadget's parent company. However, Engadget maintains full editorial control, and Verizon will have to pry it from our cold, dead hands.

Recommended stories

More stories