News & Resources

Yahoo suffers multiple data breaches

  • Posted on

Between 1 January 2012 and 31 December 2016 Yahoo suffered a series of system hacks which resulted in personal data being stolen from Yahoo accounts worldwide.

Due to failures in Yahoo’s cybersecurity systems, organised crime groups were able to launch attacks on the firm, leading to multiple instances of data being stolen. In one example, a Russian state-sponsored attack in 2014 led to personal data being stolen from 500 million Yahoo user accounts.

The data stolen included names, email addresses, telephone numbers, passwords and encrypted security questions and answers.

Despite being aware of this particular attack, Yahoo failed to report it until September 2016.

Responding to the multiple breaches, the Information Commissioner’s Office (ICO) opted to fine Yahoo £250,000. The ICO directed their focus on 515,121 UK accounts which were breached following the Russian attacks.

Speaking about the investigation, an ICO spokesperson said:

The failings our investigation identified are not what we expect from a company that had ample opportunity to implement appropriate measures, and potentially stop UK citizens’ data being compromised.

In September 2019, Yahoo informed its users that it was closing in on a lawsuit worth $117.5 million, ending the massive class-action lawsuit related to the data breaches that took place between 2012 and 2016.

However, the money would only be awarded to Yahoo customers in the US and Israel, leaving UK customers out.

Our expertise with data breaches

Hayes Connor is home to one of the largest team of data breach claims specialists in the country. With a wealth of experience and an excellent track record of success, we can guide clients through dealing with any situation where personal data has been lost, stolen or otherwise exposed.

If your data has been exposed or potentially exposed in a data breach, you can take a look at our guide to what to do if your data has been stolen in a data breach.

You can find out more about our expertise and how we handle data breach claims here.

To see how we can help with a data breach, you can use our online claim form or speak to a member of our team by calling 0151 363 5895 .

Contact us