SEC Fines Yahoo $46 Million For Failing To Disclose Hacks

SEC Fines Yahoo $46 Million For Failing To Disclose Hacks

Altaba, the holding company formed to carry the remains of Yahoo after it sold its core business to Verizon, has agreed to pay a $US35 million ($46 million) fine to the US Securities and Exchange Commission for Yahoo’s failure to quickly inform users about several massive breaches.

Photo: Justin Sullivan (Getty Images)

Hackers stole credentials for all three billion Yahoo accounts as well as some personal information in 2013. A separate 2014 incident affected 400 million Yahoo accounts. In the 2014 breach, hackers forged cookies that enabled them to log into targeted accounts without obtaining the passwords.

Yahoo didn’t disclose the breaches until late 2016, after its sale to Verizon was already underway. Verizon ultimately negotiated a $US350 million ($463 million) decrease in the acquisition price, due to Yahoo’s poor cybersecurity and incident response.

“We do not second-guess good faith exercises of judgment about cyber-incident disclosure,” Steven Peikin, co-director of the SEC Enforcement Division, said in a statement. “But we have also cautioned that a company’s response to such an event could be so lacking that an enforcement action would be warranted. This is clearly such a case.”

In quarterly and annual reports Yahoo filed with the SEC between the 2014 breach and the 2016 disclosure, it made no mention of the breach or its potential impact on investors.

“Yahoo’s failure to have controls and procedures in place to assess its cyber-disclosure obligations ended up leaving its investors totally in the dark about a massive data breach,” said Jina Choi, director of the SEC’s San Francisco Regional Office. “Public companies should have controls and procedures in place to properly evaluate cyber incidents and disclose material information to investors.”

The Cheapest NBN 50 Plans

It’s the most popular NBN speed in Australia for a reason. Here are the cheapest plans available.

At Gizmodo, we independently select and write about stuff we love and think you'll like too. We have affiliate and advertising partnerships, which means we may collect a share of sales or other compensation from the links on this page. BTW – prices are accurate and items in stock at the time of posting.