Yahoo Resets Passwords After Accounts Are Comprised in Third-Party Breach
Posted on February 1, 2014
Yahoo reset the passwords on some Yahoo Mail accounts after passwords and usernames were compromised in a hack. Yahoo shared the news in an "Important Security Update" posted on its main Tumblr blog. Yahoo did not reveal the scope of the hack.Yahoo says, "We are resetting passwords on impacted accounts and we are using second sign-in verification to allow users to re-secure their accounts. Impacted users will be prompted (if not, already) to change their password and may receive an email notification or an SMS text if they have added a mobile number to their account."
Yahoo also says it is working with federal law enforcement officials about the breach. The Internet company says malicious computer software was used to get the usernames and emails from a third-party system. They were not obtained directly from Yahoo's systems.
Yahoo also recommends its users change passwords regularly and use passwords with "different variations of symbols and characters." They also advise not using the same password on multiple sites or services, which is always wise. If hackers get a working password they will often try and use that same password on that person's other sites and services. Take a look: