Yahoo users can sue over data breaches, judge rules

US data breach victims can sue Yahoo

US data breach victims can sue Yahoo

The decision, made by U.S. District Judge Lucy Koh in San Jose, California, rejected an appeal from Verizon, which bought Yahoo last June, to dismiss numerous claims made against Yahoo in the lawsuit, including alleged negligence and breach of contract.

Yahoo was accused of being too slow to disclose three data breaches that occurred from 2013 and 2016, increasing users' risk of identity theft and requiring them to spend money on credit freeze, monitoring and other protection services.

Koh said that customers may have "taken measures to protect themselves" had they known about the breaches sooner.

Last March, US prosecutors charged two Russian intelligence agents and two hackers in connection with one of the Yahoo breaches.

Yahoo's parent company, Verizon Communications, had attempted to have many claims thrown out, saying that company was the target of "relentless criminal attacks", Reuters first reported.

US data breach victims can sue Yahoo

In October 2017, the company then amended the number of affected accounts to 3 billion, suggesting it to be by far the biggest data breach of all time. Cookies allow users to stay signed into various websites.

All told, Yahoo's 3 billion users suffered exposure of privileged information including names, email addresses, social security numbers, bank accounts, home addresses, ZIP codes, occupations, birth dates and personal preferences.

Koh agreed to toss the claims of two of the named plaintiffs who claim violations of California's unfair competition law on grounds of the threat of identity theft from the breach, but upheld the claim of another plaintiff who had paid $19.95 per year for the premium email service. They say Yahoo's failure to promptly disclose the depth and breadth of the hack created direct financial harm.

US prosecutors have charged four individuals - two Russian intelligence agents and two hackers - in connection with the data breach.

"Plaintiffs' allegations are sufficient to show that they would have behaved differently had defendants disclosed the security weaknesses of the Yahoo Mail System", Koh wrote in her decision, which was obtained by International Business Times.

Notícias recomendadas

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.