Our customer database contains general user profile information including name, email address, encrypted password, secret question and answer for password retrieval, IP address, mailing address and download history.
In the course of reporting his profile of Laura Poitras, Peter Maass conducted an encrypted question-and-answer session, for which Poitras served as intermediary, with Edward J. Snowden.
The encrypted email product in question is ProtonMail, a Swiss startup that began in 2014 by crowdfunding an alternative to U.S. encrypted email providers that had been folding under pressure to submit user data to intelligence agencies.
Yahoo said the stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords and, in some cases, encrypted or unencrypted security questions and answers.
"The stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers," Lord added.
According to the ICO personal data compromised in the breach included names, email addresses, telephone numbers, dates of birth, hashed passwords, and encrypted or unencrypted security questions and answers.
For affected accounts, Yahoo said the stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers.
Consider the recent data breaches at Yahoo! that affected as many as 1.5 billion accounts, compromising users' names, email addresses, telephone numbers, encrypted or unencrypted security questions and answers, dates of birth, and encrypted passwords.
"For potentially affected accounts, the stolen user-account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5), and, in some cases, encrypted or unencrypted security questions and answers," Yahoo's release stated.
As for what was actually taken, the company says that "names, email addresses, telephone numbers, dates of birth, hashed passwords... and, in some cases, encrypted or unencrypted security questions and answers" may have been compromised.
The Sunnyvale, Calif., Internet firm said the hacker is believed to be a "state-sponsored actor" and may have gained access to user information such as names, email addresses, telephone numbers, dates of birth, scrambled passwords, and some encrypted and unencrypted security questions and answers.
