Yahoo is investigating a new claim that user account data was obtained by a hacker, the latest security challenge for the company as it prepares for the planned acquisition of its core web services by Verizon Communications.
In a regulatory filing, Yahoo said that law enforcement authorities on Monday began sharing certain information they indicated was provided by a hacker who claimed it was Yahoo user account data. Yahoo said it’s analyzing the matter with the help of forensic experts.
In the same filing, Yahoo also updated investors on a previously disclosed hack from 2014. In that incident, experts are looking at evidence that indicates a "state-sponsored actor" breached Yahoo’s system and could have gained user data by creating "cookies" that bypassed password protection, the company said in the filing.
The company revealed the security incident in September, spurred by a hacker’s claim in July that led Yahoo to re-examine the 2014 breach, according to the filing. An independent board committee is investigating how many employees at Yahoo knew about the breach by the state-sponsored actor, and when they knew about this, the company said in the filing.