Skip to content
Friday 28 August 2026London --:--Frankfurt --:--Zurich --:--
NewslettersSearchEN · DE · FR
MorningWire

European business, markets and politics

FTSE 100
10,792.54
-0.79%
DAX
26,367.24
+0.31%
CAC 40
8,319.87
-1.68%
STOXX 50
6,424.73
-0.71%
  • Europe
  • Markets
  • Business
  • Economy
  • Regulation
  • Politics
  • Opinion
More
GermanyFranceEU InstitutionsCompetitionPublic AffairsBankingTechnologyEnergy
  • Germany
  • France
  • Europe
  • Markets
  • Business
  • Economy
  • Regulation
  • Politics
  • Opinion
  • DE
Thursday 15 December 2016 10:36 am

Yahoo hack: How to find out if your details have been stolen and what to do if they have

By: Emma Haslett

Add as a preferred source on Google

Last night Yahoo disclosed what is thought to be the largest cyber attack in history.

Up to 1bn accounts are thought to be affected by the hack, which Yahoo said took place in 2013.

How do you know if you've been affected? And what should you do if you have? We've answered all your questions here:

Read more: Most "Yahooed" in 2016: Featuring Brexit, Bowie, Mourinho and… Yahoo

So. What exactly happened?

Yahoo said last month US law enforcement showed it proof it had been hacked in August 2013, with data stolen from a billion user accounts. 

Separately, it said its forensic experts have been investigating the creation of forged cookies which could give an intruder access to users' accounts without a password, sometime during 2015 and 2016.

How do I know if I'm affected?

Yahoo has sent out emails to everyone it thinks could be affected, so check the recovery email address you use for Yahoo to find out whether you're one of the lucky billion.

What do I do now?

Sign into your Yahoo account(s) and change your password – and, potentially, the passwords of any associated email addresses which are similar. Yahoo has suspended its security questions and answers. Instead it will send an eight-digit Account Key to your recovery email address.

Which services does it affect?

Although Yahoo hasn't specified which services are affected, it ruled Tumblr accounts out of both the hack or the forged cookies. Which, presumably, means all its other services – including Yahoo-branded services such as Yahoo Finance and Yahoo Answers, as well as Flickr and Rivals.com. We've asked Yahoo for more details.

Right. This all sounds very familiar…

Yep – that's because in September this year Yahoo made a similar disclosure, saying a massive data breach in 2014 had compromised as many as 500m accounts. 

Last night's disclosure is not thought to have been associated with September's hack – which means that, potentially, 1.5bn people's account details could have been stolen in the past three years. Merry Christmas…

Share this article

  • Facebook
  • X
  • LinkedIn
  • WhatsApp
  • Email

Similarly tagged content:

Sections

  • News

Categories

  • Tech

Trending Articles

  • Pensioners to hand over bank statements in government benefits crackdown

  • Andy Burnham hints at tax rises in Autumn Budget

  • Brewdog founder James Watt hits out at ‘total silence’ over new venture

  • Lloyds Bank and Halifax users unable to use app in latest outage

  • Economists urge Bank of England to halt bond sales as borrowing costs climb

More from Morning Wire

  • Stansted Airport owner hit with cyber attack as millions of customers’ data stolen

    Transport & Infrastructure
    London Stansted Airport is part of the wider Manchester Airports Group (MAG).
  • Ask the expert: Is this a hack for contributing £29,000 to an ISA?

    Personal Finance
    Marianna Hunt discussing financial strategies at a business conference, wearing a professional suit, engaging with the aud...
  • UK’s AI watchdog flags new OpenAI and Anthropic cyber alarms

    AI
    Smartphone displaying the Claude by Anthropic AI assistant app, showing the app icon and interface.
  • City trading ‘higher than thought’, FCA believes

    Markets
    GettyImages 2211256637 showing a significant event or figure relevant to recent news updates in the business sector
  • AI gold rush leaves accountancy firms exposed to costly cyberattacks

    AI
    Two tablets displaying code and a cyber warning symbol, with blurry blue and pink background numbers
  • Billions in pensions go missing: JP Morgan and Standard Life reconnect Brits with lost wealth

    Personal Finance
    Stacks of various currency bills symbolizing financial news and economic trends on a business website
  • Iranian hackers behind UK energy plant attack

    Energy
    UK industrial electricity prices are the highest in the G7 and 46 per cent above the average of the International Energy Agency.
  • Champions Cup rugby team hacked in ransom attack with player data at risk

    Sport Business
    Rugby player in a pink uniform running with the ball, pursued by an opponent in a black jersey.
MorningWire

Independent European business, markets and political news for decision-makers.

Morning Briefing

Europe

  • Germany
  • France
  • EU Institutions
  • Europe

Business

  • Markets
  • Business
  • Economy
  • Regulation
  • Competition
  • Public Affairs

Editorial

  • Opinion
  • Editorial Policy
  • Corrections
  • Contact

Company

  • About Morning Wire
  • Privacy Policy
  • Terms of Use
  • Cookie Policy
© 2026 Morning Wire Ltd · Published by Morning Wire Media, Bahnhofstrasse 65, 8001 Zürich, Switzerland
Privacy · Terms · Cookies · Facebook