Yahoo admits some staff knew of 2014 hack

yahoo-admits-some-staff-knew-of-2014-hack photo 1 Noah Berger/Bloomberg via Getty Images

As Yahoo attempts to piece together how a hacker accessed 500 million user accounts back in 2014, the company has now admitted that some employees knew of a security breach when it happened. In a filing with the SEC, Yahoo said that while it only disclosed news of the attack in August, a "state-sponsored actor" had accessed its network two years ago but it didn't quite know the extent of the damage at the time.

"The Company had identified that a state-sponsored actor had access to the Company's network in late 2014," Yahoo said in its filing. "An Independent Committee of the Board, advised by independent counsel and a forensic expert, is investigating, among other things, the scope of knowledge within the Company in 2014 and thereafter regarding this access, the Security Incident, the extent to which certain users' account information had been accessed."

In the same statement, Yahoo said it is looking into whether the same hacker was able to create cookies that would allow them to access user account data without the need for a password. Since the disclosure, law enforcement agencies have also shared data provided by an attacker. Yahoo is now assessing whether user details are from the 2014 hack or from a separate intrusion.

Account information stolen in the attack is thought to include email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority of which were encrypted) and possibly security questions and answers too. The hack has already cost Yahoo $1 million, but it may run into the billions if Verizon pushes for money off its latest acquisition.

*Verizon has acquired AOL, Engadget's parent company. However, Engadget maintains full editorial control, and Verizon will have to pry it from our cold, dead hands.

More stories

How to Make Reddit Suck Less

You used to love Reddit, but it’s just not fun anymore. The jokes aren’t funny, the tips aren’t useful, and everyone is constantly fighting about internal drama or identity politics.

I love Electric Scooters

How exciting is it to move around fast and still enjoy wind in your hair? How exciting is it to protect the environment while commuting or completing tasks in...

The History of Youtube

Started by Jawed Karim, Steve Chen, and Chad Hurley, YouTube first launched in 2005 and has now become one of the most visited websites in the history of the i...