According to the latest statement by Yahoo on Tuesday, all three billion of its accounts were hacked in 2013 data theft, which declared the largest breach in the history.
The news expands the likely number and claims of class action lawsuits by shareholders and Yahoo account holders, they said. Yahoo, the early face of the internet for many in the world, already faced at least 41 consumer class-action lawsuits in US federal and state courts, according to company securities filing in May.
John Yanchunis, a lawyer who is representing some of the affected Yahoo users, said to a federal judge who allowed the case to go forward still had asked for more information to justify his clients’ claims.
“I think we have those facts now,” he said. “It’s really mind-numbing when you think about it.”
Yahoo said last December that data from more than one billion accounts were compromised in 2013, the largest of a series of thefts that forced Yahoo to cut the price of its assets in a sale to Verizon.
Yahoo said on Tuesday “recently obtained new intelligence” showed all user accounts had been affected. The company said the investigation indicated that the stolen information did not include passwords in clear text, payment card data, or bank account information.
But the information was protected with outdated, easy-to-crack encryption, according to academic experts. It also included security questions and backup email addresses, which could make it easier to break into other accounts held by the users.