Skip to main content

More than 500 million Yahoo accounts stolen back in 2014 and What you should do?

Yahoo has confirmed that more than 500 million Yahoo accounts were stolen back in 2014 by a state-sponsored actor. Investigation concluded the stolen account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers. This did not include unprotected passwords, payment card data, or bank account information.

What is Yahoo doing to protect my account?

From the Account Security Issue FAQs published by Yahoo:
  1. We are notifying affected users.
  2. We are asking affected users to promptly change their passwords and adopt alternate means of account verification.
  3. We invalidated unencrypted security questions and answers so that they cannot be used to access an account.
  4. We are recommending that all users who haven't changed their passwords since 2014 do so.
  5. We continue to enhance our systems that detect and prevent unauthorized access to user accounts.
  6. Our investigation into this matter continues.
I personally tried to log into all of my three Yahoo accounts and out of these three, one of them could be compromised. If yours is too, you will see the below popup.



Is there anything I can do to protect myself?

From the Account Security Issue FAQs published by Yahoo:
  1. Change your password and security questions and answers for any other accounts on which you use the same or similar credentials as the ones used for your Yahoo Account.
  2. Review your accounts for suspicious activity.
  3. Be cautious of any unsolicited communications that ask for your personal information or refer you to a web page asking for personal information.
  4. Avoid clicking on links or downloading attachments from suspicious emails.

Popular Posts

Ho Ching named 5th most powerful and is mistaken as first lady by Forbes

Forbes named Singapore Prime Minister wife and CEO of Temasek Holdings, Ho Ching, as the 5th most powerful woman in the world. Ho Ching is mistaken as Singapore's first lady! OMG!

I wonder how can Forbes makes such a blunder. For a complete list, refer to here.

Dr Lee Wei Ling - Why I choose to remain single

Why I choose to remain single

Sun, Apr 05, 2009 - The Straits Times
My parents have a loving relationship, but I knew I could not live my life around a husband
By Lee Wei Ling

My father became prime minister in 1959, when I was just four years old. Inevitably, most people know me as Lee Kuan Yew's daughter.

My every move, every word, is scrutinised and sometimes subject to criticism. One friend said I lived in a glass house. After my father's recent comment on my lack of culinary skills, another observed: 'You live in a house without any walls.' Fortunately, I am not easily embarrassed.

As long as my conscience is clear, what other people say of me does not bother me. Indeed, I am open about my life since the more I try to conceal from the public, the wilder the speculation becomes.

My father said of my mother two weeks ago: 'My wife was...not a traditional wife. She was educated, a professional woman... We had Ah Mahs, reliable, professional, dependable. (My wife) came b…

How to stop FortiClient from starting automatically?

Installed FortiClient recently but the challenge in disabling the application/service from running automatically on every start-up annoyed me. Attempt to stop 'FortiClient Service Scheduler' only return 'Parameter is incorrect' error message.

An article on Technet help solve my trouble. To stop FortiClient from starting automatically, try the following:
Shut down FortiClient from the system tray.
Run net stop fortishield on command prompt.
Run msconfig.
On msconfig, switch to the Services tab. Clear the FortiClient Service Scheduler check box and click Apply.Run services.msc on command prompt to open up show all available services.Look for FortiClient Service Scheduler. Switch Startup type to Manual.Restart your computer. FortiClient should not be running automatically the next time round. Hope it helps.