Yahoo Investigates New Hack Claim
In the same filing, Yahoo also updated investors on a previously disclosed hack from 2014. In that incident, experts are looking at evidence that indicates a "state-sponsored actor" breached Yahoo’s system and could have gained user data by creating "cookies" that bypassed password protection, the company said in the filing.
The company revealed the security incident in September, spurred by a hacker’s claim in July that led Yahoo to re-examine the 2014 breach, according to the filing. An independent board committee is investigating how many employees at Yahoo knew about the breach by the state-sponsored actor, and when they knew about this, the company said in the filing.