Yahoo Hacked Twice

On November 22nd 2016, Yahoo confirmed hackers stole personal information associated with at least a half billion Yahoo accounts making this the largest data breach in history. The latest hack discovery, in December is believed to have taken place in 2013 and is likely distinct from the previous hack. The number of compromised accounts now number more than 1 billion.

The hack revealed names, email addresses, phone numbers, birth dates and, in some cases, security questions and answers, Yahoo has said in a press release. Encrypted and unencrypted passwords, were also taken.

Cybercriminals know that consumers use the same passwords across websites and applications, which is why these millions of leaked password credentials are so useful for perpetuating fraud. It is strongly recommended you use a different strong password or pass phrase for each account you have on the internet.

What You Need to Do Immediately:

Yahoo is recommending that people who haven't changed their password since 2013 do so now! The company says the passwords hackers stole were encrypted -- scrambled up with a tool called bcrypt. You can change password by using this link: http://att.com/emailpasswordreset .

If you recycled or re-used your Yahoo password on a different account, go change your password on that account too. The hackers who have your password could easily try it on different websites – think Credit Union and/or Bank websites or Health Insurance Websites (Coveted targets of cyber-criminals) – in an attempt to access information beyond your Yahoo account.

Turn on Yahoo MFA: Sign in to your Yahoo Account Info Page.

1. Click Account security.
2. Under "Two-step verification," click the On/Off icon.
3. Enter your mobile number.
4. To enable two-step verification, you’ll need to verify your mobile number.
5. Click Send SMS to receive a text message with an Account Key, or Call Me to receive a phone call with your code.
6. Enter the verification code, click Verify.