야후 10억명 이상의 회원정보 해킹당해...깔끔한 후속처리...

야후 회원정보 해킹관련 깔끔한 고객대응...

오늘 아침에 출근해서 보니 아래와 같은 제목으로 야후에서 메일이 한 통...

"Important Security Information for Yahoo Users"

요즘 피싱 메일이 하도 심하니 열어보기도 겁나네...

메일 내용은 역시나 2013년 8월 회원 계정이 털렸다는 소식이다.

더구나 기존 5억명 해킹과는 다른 건으로 무려 10억명의 회원정보라고 한다.

이름, 이메일 주소, 생년월일, 전화번호, 비밀번호 등이 포함되었다고 한다.

그러나 여기에서 우리가 주목해야 하는 것!

바로 고객에 대한 야후의 대응이다.

해당 내용을 아래와 같이 피해 고객에게 이메일로 자세하게 안내

1. 사건 개요 및 피해내용 (What Information Was Involved?)

2. 야후의 조치내용 (What We Are Doing)

3. 회원이 취해야 하는 내용 (What You Can Do)

NOTICE OF DATA BREACH Dear Yahoo User, We are writing to inform you about a data security issue that may involve your Yahoo account information. We have taken steps to secure your account and are working closely with law enforcement. What Happened? Law enforcement provided Yahoo in November 2016 with data files that a third party claimed was Yahoo user data. We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, we believe an unauthorized third party, in August 2013, stole data associated with a broader set of user accounts, including yours. We have not been able to identify the intrusion associated with this theft. We believe this incident is likely distinct from the incident we disclosed on September 22, 2016. What Information Was Involved? The stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers. Not all of these data elements may have been present for your account. The investigation indicates that the stolen information did not include passwords in clear text, payment card data, or bank account information. Payment card data and bank account information are not stored in the system we believe was affected. What We Are Doing We are taking action to protect our users: We are requiring potentially affected users to change their passwords. We invalidated unencrypted security questions and answers so that they cannot be used to access an account. We continuously enhance our safeguards and systems that detect and prevent unauthorized access to user accounts. What You Can Do We encourage you to follow these security recommendations: Change your passwords and security questions and answers for any other accounts on which you used the same or similar information used for your Yahoo account. Review all of your accounts for suspicious activity. Be cautious of any unsolicited communications that ask for your personal information or refer you to a web page asking for personal information. Avoid clicking on links or downloading attachments from suspicious emails. Additionally, please consider using Yahoo Account Key, a simple authentication tool that eliminates the need to use a password on Yahoo altogether. For More Information For more information about this issue and our security resources, please visit the Yahoo Security Issues FAQs page available at https://yahoo.com/security-update. Protecting your information is important to us and we work continuously to strengthen our defenses. Sincerely, Bob Lord Chief Information Security Officer Yahoo

이번 야후 해킹사건에 대한 상세정보 페이지를 제공

https://help.yahoo.com/kb/account/SLN27925.html?impressions=true

Yahoo Security Notice December 14, 2016

Yahoo has identified data security issues concerning certain Yahoo user accounts. Yahoo has taken steps to secure user accounts and is working closely with law enforcement.

Below are FAQs containing details about these issues and steps users can take to help protect their accounts.

For information about the data security issue the company disclosed on September 22, 2016, click here.

What happened?

Was my account affected by the August 2013 incident?

Was my account affected by the cookie forging activity?

What information was taken in the August 2013 incident?

What is a "hashed" password?

What information was affected by the cookie forging activity?

What is a “cookie”?

Are these incidents related to the data theft that Yahoo announced on September 22, 2016?

I think I received one or more emails about these issue. How do I know that they're really from Yahoo?

What is Yahoo doing to protect my account?

How do I change my password or disable security questions and answers?

Is there anything I can do to protect myself?

What additional steps can I take to protect my information?

Are Tumblr accounts affected?

How can I get help with my account?

야후 메인페이지에 이번 회원정보 해킹사실을 탑 뉴스로 위치! 

이번 야후 회원정보 해킹사건 및 야후의 대응을 보면서 

개인정보가 털린 한국의 기업들은 어떻게 대응했는지...

앞으로 어떻게 대응할 지 기대됨....