야후 회원정보 해킹관련 깔끔한 고객대응...
오늘 아침에 출근해서 보니 아래와 같은 제목으로 야후에서 메일이 한 통...
"Important Security Information for Yahoo Users"
요즘 피싱 메일이 하도 심하니 열어보기도 겁나네...
메일 내용은 역시나 2013년 8월 회원 계정이 털렸다는 소식이다.
더구나 기존 5억명 해킹과는 다른 건으로 무려 10억명의 회원정보라고 한다.
이름, 이메일 주소, 생년월일, 전화번호, 비밀번호 등이 포함되었다고 한다.
그러나 여기에서 우리가 주목해야 하는 것!
바로 고객에 대한 야후의 대응이다.
해당 내용을 아래와 같이 피해 고객에게 이메일로 자세하게 안내
1. 사건 개요 및 피해내용 (What Information Was Involved?)
2. 야후의 조치내용 (What We Are Doing)
3. 회원이 취해야 하는 내용 (What You Can Do)
|
|
|
|
|
NOTICE OF DATA BREACH
|
|
|
|
Dear
Yahoo User,
|
|
We are writing to
inform you about a data security issue that may involve your Yahoo
account information. We have taken steps to secure your account and are
working closely with law enforcement.
What Happened?
Law enforcement
provided Yahoo in November 2016 with data files that a third party
claimed was Yahoo user data. We analyzed this data with the assistance of
outside forensic experts and found that it appears to be Yahoo user data.
Based on further analysis of this data by the forensic experts, we believe
an unauthorized third party, in August 2013, stole data associated with a
broader set of user accounts, including yours. We have not been able to
identify the intrusion associated with this theft. We believe this
incident is likely distinct from the incident we disclosed on September
22, 2016.
What Information Was Involved?
The stolen user
account information may have included names, email addresses, telephone
numbers, dates of birth, hashed passwords (using MD5) and, in some cases,
encrypted or unencrypted security questions and answers. Not all of these
data elements may have been present for your account. The investigation
indicates that the stolen information did not include passwords in clear
text, payment card data, or bank account information. Payment card data
and bank account information are not stored in the system we believe was
affected.
What We Are Doing
We are taking action
to protect our users:
- We are requiring potentially
affected users to change their passwords.
- We invalidated unencrypted
security questions and answers so that they cannot be used to access
an account.
- We continuously enhance our
safeguards and systems that detect and prevent unauthorized access
to user accounts.
What You Can Do
We encourage you to
follow these security recommendations:
- Change your passwords and
security questions and answers for any other accounts on which you
used the same or similar information used for your Yahoo account.
- Review all of your accounts
for suspicious activity.
- Be cautious of any unsolicited
communications that ask for your personal information or refer you
to a web page asking for personal information.
- Avoid clicking on links or
downloading attachments from suspicious emails.
Additionally, please
consider using Yahoo Account Key, a simple authentication tool that
eliminates the need to use a password on Yahoo altogether.
For More Information
For more information
about this issue and our security resources, please visit the Yahoo
Security Issues FAQs page available at https://yahoo.com/security-update.
Protecting your information is important to us and we work continuously
to strengthen our defenses.
Sincerely,
Bob Lord
Chief Information Security Officer
Yahoo
|
|
|
|
| | |
이번 야후 해킹사건에 대한 상세정보 페이지를 제공
https://help.yahoo.com/kb/account/SLN27925.html?impressions=true
Yahoo Security Notice December 14, 2016
Yahoo has identified data security issues concerning certain Yahoo user accounts. Yahoo has taken steps to secure user accounts and is working closely with law enforcement.
Below are FAQs containing details about these issues and steps users can take to help protect their accounts.
For information about the data security issue the company disclosed on September 22, 2016, click here.
What happened?
Was my account affected by the August 2013 incident?
Was my account affected by the cookie forging activity?
What information was taken in the August 2013 incident?
What is a "hashed" password?
What information was affected by the cookie forging activity?
What is a “cookie”?
Are these incidents related to the data theft that Yahoo announced on September 22, 2016?
I think I received one or more emails about these issue. How do I know that they're really from Yahoo?
What is Yahoo doing to protect my account?
How do I change my password or disable security questions and answers?
Is there anything I can do to protect myself?
What additional steps can I take to protect my information?
Are Tumblr accounts affected?
How can I get help with my account?
야후 메인페이지에 이번 회원정보 해킹사실을 탑 뉴스로 위치!
이번 야후 회원정보 해킹사건 및 야후의 대응을 보면서
개인정보가 털린 한국의 기업들은 어떻게 대응했는지...
앞으로 어떻게 대응할 지 기대됨....