Yahoo issues password reset advice in wake of Japanese hack
Around 22 million users could have had their login names stolen, following attack on company's Japanese admin system.
Hackers have stolen the login names of 22 million Yahoo users in Japan, prompting the internet search giant to urge people to change their passwords immediately.
The company said the details were contained in a file that may have been stolen during an attack on its systems, which was picked up by Yahoo on 16 May.
"We don't know if the file (of 22 million user IDs) was leaked or not, but we can't deny the possibility given the volume of traffic between our server and external [terminals]," said the company in a statement to AFP.
However, the company has been quick to stress that no information that would allow the hackers to seize control of users' accounts was pilfered during attack.
Even so, the company is urging users to change their passwords as a precautionary measure.
According to reports, Yahoo Japan has around 200 million members, which means the attack could have affected around 10 per cent of the country's total user base.
Ross Brewer, managing director and vice president for international markets at security vendor LogRhythm, said Yahoo should be commended for coming clean about the attack.
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
"[Yahoo] should also be commended for providing its members with actionable advice on how to stop hackers from compromising their individual accounts," said Brewer.
"However, in the aftermath of any breach, it's also absolutely vital to investigate how the attackers managed to get in, and then use this intelligence to beef up security defences in the future."
De proyecto piloto a proyecto que da frutos: estas son las empresas que están viendo resultados reales con agentes de IA
A sign of things to come in software development? Mark Zuckerberg says AI will be doing the work of mid-level engineers this year – and he's not the only big tech exec predicting the end of the profession
Global cyber attacks jumped 44% last year