Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire 24.com network.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.


Yahoo confirms password theft

13 July 2012, 09:01

 London - Some 450 000 Yahoo users' e-mail addresses and passwords have been leaked because of a security breach, the company confirmed on Thursday, adding that just a small fraction of the stolen passwords were valid.

The company said in a statement that an "old file" from the Yahoo Contributor Network was compromised on Wednesday. Among the stolen e-mails and passwords were many from Yahoo's own e-mail service along with those of other companies. The Yahoo Contributor Network is a content-sharing platform.

Yahoo said it is fixing the vulnerability that led to the disclosure, changing the passwords of affected Yahoo users, and notifying other companies whose users' accounts may have been compromised.

"We apologise to all affected users," the company statement said.

Technology news websites including CNET, Ars Technica, and Mashable identified the hackers behind the attack as a little-known outfit calling itself the D33D Company.


The group was quoted as saying it had stolen the unencrypted passwords using an SQL injection - the name given to a commonly used attack in which hackers use rogue commands to extract data from vulnerable websites.

"We hope that the parties responsible for managing the security of this subdomain will take this as a wake-up call," the group was quoted as saying.

Online security experts said Yahoo might have done more to protect the stored passwords, with Ohio-based TrustedSec describing the internet giant's decision not to encrypt them as "most alarming".

Nevertheless, the haul does not appear as useful to hackers as they might have thought. Yahoo cautioned that only 5% of passwords associated with its account holders were valid.

It was not immediately possible to contact the Ukraine-registered website associated with D33D Company. Its contact form was inoperable on Thursday, while an e-mail address and a phone number attributed to the site's registrant appeared to be invalid.

- AP


Read News24’s Comments Policy

Comment on this story
Comments have been closed for this article.

Read more from our Users

Nigeria @ 56: Words to my green f...

A leader’s job is not to dictate, but rather to be respected, admired and be a trustee, of the land we love, with so much potential, a land which should be freer than free. Its still a long way to fufilling our destiny! Read more...

Submitted by
Isaac Asabor263
Recession: An opportunity for Nig...

The recession should be seen as an opportunity for the country’s promotion as long as we all collectively conduct ourselves in a patriotic manner, writes Isaac Asabor.  Read more...

Submitted by
Black and White

We want to imitate the whites in everything because we are ignorant of our inherent originality and content. We spend all our Naira to acquire his inventions because we so oblivious of our natural endowments that we allow him have it for free. Read more...

Submitted by
Nate Nat
Adamawa State University Mubi: A ...

ADSU integrity forum has accused the Sunday Joshua Wugira, a lawyer, of adopting unorthodox tactics by abusing his privilege by attacking the integrity of ADSU Vice Chancellor Dr. Moses Zira Zaruwa, writes a News24 reader. Read more...

Submitted by
Abdulsalam Jubril
My Country Nigeria (Part One)

Poetry by Abdulsalam Jubril.

Submitted by
Abdulsalam Jubril
Recession, dearth in leadership a...

Every leader has the opportunity to become great and making himself immortal in the lives and hearts of people for generations to come. Will Mr. President seize this opportunity?, questions Abdulsalam Jubril. Read more...