Team Clark is adamant that we will never write content influenced by or paid for by an advertiser. To support our work, we do make money from some links to companies and deals on our site. Learn more about our guarantee here.
For the third time in less than six months, Yahoo is warning users that their email accounts may have been hacked.
In December the Internet giant confirmed that a data breach back in 2013 had put a billion users’ accounts at risk. The company also said at the time that the incident was believed to be completely separate from the hack Yahoo reported in September, which involved 500 million accounts.
Read more: Amazon users targeted by phishing scam after bank account info
Now, Yahoo is notifying users that their accounts may have been hacked sometime between 2015 and 2016, but the company did not say how many people may have been affected.
‘As we have previously disclosed, our outside forensic experts have been investigating the creation of forged cookies that could have enabled an intruder to access our users’ accounts without a password,’ a Yahoo spokesperson told Clark.com in an email.
‘The investigation has identified user accounts for which we believe forged cookies were taken or used. Yahoo is in the process of notifying all potentially affected account holders. Yahoo has invalidated the forged cookies so they cannot be used again.’
According to a source familiar with the case, the security investigations are in their final stages and the company has notifified a ‘reasonably final list of users’ — which means many, but not all, victims of the breach have been notified.
Read more: Gmail scam is tricking users into handing over personal information
Pretty much any and everything associated with your Yahoo email account could have been stolen by hackers.
According to Yahoo, the stolen account information may have included:
Yahoo says the investigation has found no evidence that passwords in clear text, payment card data or bank account account information were included in the stolen data.
If all this sounds a little familiar, that’s probably because we’ve heard it all before — it just keeps happening.
Yahoo first mentioned ‘forged cookies’ when it announced the massive hack back in December: ‘Based on the ongoing investigation, we believe an unauthorized third party accessed our proprietary code to learn how to forge cookies.’
That basically means criminals were able to hack the company’s proprietary code in order to gain access to users’ accounts without even having a password.
Yahoo says the forged cookies have been ‘invalidated’ and cannot be used again, but that doesn’t help users who may have already been affected by malicious activity carried out through these hacks.
Read more: 3 things that increase your risk of being a fraud victim
Although Yahoo says their investigation shows no indication that bank account or credit card information was stolen, criminals could easily use something else they found about you through your email account to gain access to other accounts that contain personal, sensitive information.
If you have a Yahoo account, you need to change your password immediately, regardless of whether or not you have received the notification email from Yahoo.
If you have used any password ever associated with your Yahoo account with any other account, you need to also change the passwords on those accounts immediately.
As a general rule of thumb, if you receive an email you weren’t expecting, do not click on any links inside the email. Even if you are expecting an order confirmation or package to be delivered, do not click on any links in an email notification. Go to the company’s website directly to get any delivery or order information.
Here are some more tips to help you protect yourself from online scammers:
For basic protection, use anti-virus and anti-malware software on all of your devices and make sure to keep it up to date. See our Virus, Spyware and Malware Protection Guide for links to free options.
This post was last modified on March 24, 2017 11:31 am
If you've been considering signing up for one of the Chase Sapphire credit cards, now…
The costs associated with owning a home go way beyond the amount on the mortgage. …
Inflation hits people on a fixed income the hardest. Say you're retired. You're living off…
Deciding to save and invest are great habits. But once you check that box, your…
If you're considering subscribing to Fubo, you need to be comfortable missing out on some…
Are you looking for a way to earn 2% back on every purchase you make…