[BreachExchange] Judge Allows A Major Lawsuit Against Yahoo Over Hacked Data

Audrey McNeil audrey at riskbasedsecurity.com
Thu Aug 31 19:52:13 EDT 2017


https://www.androidheadlines.com/2017/08/judge-allows-
major-lawsuit-yahoo-hacked-data.html

United States District Judge Lucy Koh on Wednesday came to a decision that
a number of plaintiffs are allowed to move forward with their lawsuit
against Yahoo which they filed over several data breaches that the company
suffered in recent years which compromised more than a billion users. The
San Jose-based District Court for the Northern District of California ruled
that the plaintiffs have a legitimate claim that they suffered due to
Yahoo’s failure to disclose the controversial breaches in time,
consequently rejecting the defendant’s claim that there’s no legal basis
for the case.

Judge Koh specifically mentioned allegations related to unfair competition
and breach of contract as being a valid basis for the plaintiffs to sue the
company that now operates as part of Verizon’s division Oath which was
created by merging Yahoo’s Internet assets with AOL. Some of the plaintiffs
claim that they were victims of identity theft after their Yahoo-stored
data was compromised without their knowledge, with others claiming that
they had to spend money to minimize the chances of their identities being
stolen and saying how such a scenario is now significantly more realistic
due to Yahoo’s actions. A number of plaintiffs also claimed that they could
have avoided any negative consequences of the hacking attacks had Yahoo
notified them about the issue and told them to change their passwords in a
timely manner.

One of the plaintiffs’ attorneys John Yanchunis referred to Yahoo’s
troubles as the largest “data breach” in the industry’s history and called
Judge Koh’s decision as “a significant victory for consumers.” Yahoo
suffered three breaches in a period from 2013 to 2016, with the first one
being said to have affected over a billion users. Verizon has yet to
comment on the matter in an official capacity, though the latest turn of
events is unlikely to please the telecom giant which spent $4.76 billion to
acquire Yahoo’s core business as part of a deal which was concluded in June
in an attempt to diversify its operations and strengthen its advertising
endeavors. The U.S. Department of Justice has already indicted three people
over Yahoo hacks earlier this year, though only one of them is expected to
personally face the charges laid out by the government, with the other two
currently residing in Russia with little to no chances of being extradited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20170831/9af7702b/attachment.html>


More information about the BreachExchange mailing list