Yahoo!

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

• 2026-09-25 · Yahoo!, 2016-09-22 · data_types: ["names","emails","phone","dob","passwords","other","addresses"]
• 2026-09-25 · Yahoo!, 2016-09-22 · occurred: 2016-08-13
• 2026-09-25 · Yahoo!, 2016-09-22 · source: https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%208-1-2021%20through%2012-5-2018%20REDACTED.xlsx
• 2026-09-25 · Yahoo!, 2016-09-22 · fine_usd: 334000
• 2026-09-25 · Yahoo!, 2016-09-22 · lawsuit: GBP 250,000 ICO fine (June 2018); USD 35M SEC penalty on Altaba (2018)
• 2026-09-25 · Yahoo!, 2016-09-22 · records: 515000
• 2026-09-25 · Yahoo!, 2016-09-22 · summary: The 2014 Yahoo breach, disclosed publicly in September 2016, affected about 500 million accounts including more than 515,000 UK accounts controlled by Yahoo UK Services. The ICO fined it GBP 250,000 under the Data Protection Act 1998 for se
• 2026-09-25 · Yahoo!, 2016-09-22 · title: 2014 Yahoo breach hit 515,000 UK accounts; ICO fine of GBP 250,000
• 2026-09-25 · Yahoo!, 2012-07-12 · source_type: press
• 2026-09-25 · Yahoo!, 2012-07-12 · source_url: https://www.bbc.co.uk/news/technology-18811300
• 2026-09-25 · Yahoo!, 2012-07-12 · attack: hacking
• 2026-09-25 · Yahoo!, 2012-07-12 · records_basis: organization
• 2026-09-25 · Yahoo!, 2012-07-12 · disclosed: 2012-07-12
• 2026-09-25 · Yahoo!, 2012-07-12 · summary: Yahoo confirmed it was investigating a breach that exposed about 450,000 user IDs and plain text passwords taken from servers tied to its Yahoo Voices publishing service.
• 2026-09-25 · Yahoo!, 2012-07-12 · title: SQL injection on Yahoo Voices leaks about 450,000 plaintext passwords
• 2026-09-25 · Yahoo!, 2016-09-22 · status: settled
• 2026-09-25 · Yahoo!, 2016-09-22 · fine_usd: 35000000
• 2026-09-25 · Yahoo!, 2016-09-22 · lawsuit: $35M SEC penalty for failure to disclose (2018)
• 2026-09-25 · Yahoo!, 2016-09-22 · records: 500000000
• 2026-09-25 · Yahoo!, 2016-09-22 · summary: Yahoo confirmed that information associated with at least 500 million user accounts, including names, emails, phone numbers, birth dates, hashed passwords and some security questions, was stolen in late 2014 by what it believed was a state-
• 2026-09-25 · Yahoo!, 2016-09-22 · title: State-sponsored actor stole data tied to 500 million Yahoo accounts in 2014
• 2026-09-25 · Yahoo!, 2016-09-22 · sector: tech
• 2026-09-25 · Yahoo!, 2016-09-22 · attack: hacking
• 2026-09-25 · Yahoo!, 2016-09-22 · data_types: ["names","emails","phone","dob","passwords","other"]
• 2026-09-25 · Yahoo!, 2016-09-22 · records_basis: organization
• 2026-09-25 · Yahoo!, 2016-09-22 · records: 1000000000
• 2026-09-25 · Yahoo!, 2016-09-22 · summary: Yahoo disclosed that an unauthorized third party stole data associated with more than one billion user accounts in August 2013, including names, emails, phone numbers, birth dates, MD5-hashed passwords and some security questions. The figur
• 2026-09-25 · Yahoo!, 2016-09-22 · title: August 2013 theft of data from more than one billion Yahoo accounts
• 2026-09-25 · Yahoo!, 2012-07-12 · added
• 2026-09-25 · Yahoo! · domain: yahoo.com