Two Privacy Breaches at Yahoo

On September 22, 2016, Yahoo announced that the account information of 500 million users had been stolen in a hack in late 2014.

On December 14, 2016, Yahoo announced that the account information of over one billion users had been stolen in a separate hack in August 2013.

On December 14, 2016, Yahoo also indicated that an unspecified number of user accounts were accessed throughout 2015 and 2016 in a third, separate cyberattack involving forged cookies.

Yahoo has confirmed that users’ real names, email addresses, telephone numbers, encrypted/unencrypted security questions and answers, dates of birth and hashed passwords have all been leaked.

Many Canadian users of Yahoo will be affected. This may include Canadians who used Yahoo! Mail, Answers, Auto, Finance, Groups, Messenger, and so on, in addition to Flickr, Sky, Tumblr and others.

April 2017: we are aware that there have been updates related to the criminal investigations concerning to these privacy breaches.

Yahoo’s Public Statements

Yahoo notified some affected users by email, and published notices online.

View the September 22, 2016 Notice here.

View the December 14, 2016 Notice here.

Yahoo Privacy Breach Class Action Lawsuit

Charney Lawyers PC is commencing a national class proceeding lawsuit on behalf of Canadians whose Yahoo account information was stolen in the data breaches described above. The plaintiff asserts that Yahoo failed to adequately protect its users’ information and to adequately notify its users after the hacks.

What to Do Next?

All users of Yahoo services should immediately change their passwords with Yahoo and with any other websites/programs using the same password.

All users should clear their cookies, and continue to do so regularly.

Anyone who believes their identity may have been compromised should immediately notify their banks and credit card companies, and continue to monitor their accounts for suspicious activities. Affected individuals should also consider contacting a credit bureau such as TransUnion Canada or Equifax to determine whether there have been any unauthorized transactions on their accounts to explore options to purchase credit protection services.

Register for the Yahoo Privacy Breach Class Action

All Canadians who were Yahoo customers before 2015 are urged to REGISTER HERE to receive updates about the class action, especially if there is a settlement or award of damages.

Contact Us

If you have any questions, please contact:

Tina Q. Yang
Charney Lawyers PC

Charney Lawyers: Canada’s Top Privacy Lawyers

Charney Lawyers PC is one of Canada’s leaders in privacy breach litigation. We are prosecuting numerous privacy class actions and data breach class actions across Canada.

The Yahoo privacy breach may be ideally suited to class proceedings because many Canadians were affected in the same way. A class proceeding would allow all Canadian users to access justice without each hiring their own lawyers. All Canadian users would be represented by a small team of lawyers who would be paid out of the settlement or court awards. Any users who do not wish to be represented will be able to simply opt-out.