After a hacker going by the name of Peace put up for sale a cache of what's alleged to be 200 million stolen Yahoo credentials earlier this week, the Internet company says it has started investigating the matter, claiming that it is taking this breach "very seriously". 4y403y
Peace has listed an advert on the TheRealDeal marketplace claiming that about 200 million Yahoo s are up for sale for three Bitcoins (roughly Rs. 1,07,000). The cache supposedly contains names, s, and dates of birth, and appear to be hashed by the md5 algorithm, Motherboard reports. The hacker has also submitted a way to unscramble the hashed credentials as well, and claims the cache contains records that are from "2012 most likely."
Yahoo has confirmed that it is aware about this data breach, and is investigating it. "Our security team is working to determine the facts. Yahoo works hard to keep our s safe, and we always encourage our s to create strong s, or give up s altogether by using Yahoo Key, and use different s for different platforms," the company told Motherboard.
Peace is also known for selling data dumps of other major tech companies like MySpace and LinkedIn. This data is especially useful for phishers who look to monetize through illegitimate ways. Motherboard got hold of a small sample of 5000 Yahoo s, and when it tested about a hundred of them; it found out that most IDs seem to be inactive, disabled, or discontinued.
Because of this, it's being speculating that either the data is too old to be considered valuable or the advert is just fake. Yahoo gave away very little about the investigations and only said that it was "working to determine the facts". If real, affected s can expect reset links to be sent to them at some point.
(Also see: When Yahoo Refused to Buy Google for $1 Million)
Verizon recently bought Yahoo's core business for $4.83 billion (roughly Rs. 32,500 crores). Yahoo will be rolled into Verizon's AOL operations and CEO Marissa Meyers will be working again with AOL CEO Tim Armstrong, who worked with Mayer at Google for years and tried unsuccessfully to convince her to combine the two companies when they both remained independent.