YAHOO! HAS TODAY been digging into how hackers looted nearly a half million passwords and email addresses from one of its servers.

A hacker group calling itself D33DS posted online a massive trove of data it said were unencrypted in a file pilfered from the Sunnyvale, California-based Internet pioneer “as a wake-up call not as a threat.”

Yahoo! confirmed that a file from its Contributor Network (formerly Associated Content) containing approximately 450,000 Yahoo! and other company users names and passwords was compromised on Wednesday.

“We apologize to all affected users,” Yahoo! said in a prepared statement.

“We are taking immediate action by fixing the vulnerability that led to the disclosure of this data, changing the passwords of the affected Yahoo! users and notifying the companies whose users accounts may have been compromised.”

Less than five percent of the Yahoo! account data stolen had valid passwords, the company contended.

Making a difference

A mix of advertising and supporting contributions helps keep paywalls away from valuable information like this article. Over 5,000 readers like you have already stepped up and support us with a monthly payment or a once-off donation.

For the price of one cup of coffee each week you can make sure we can keep reliable, meaningful news open to everyone regardless of their ability to pay.

Support us Learn More

Affected accounts were reportedly at an Internet telephone service called Yahoo! Voices, which is related to the company’s instant messaging feature.

“The most alarming part to the entire story was the fact that the passwords were stored completely unencrypted and the full 400,000-plus usernames and passwords are now public,” Internet security firm TrustedSec said in a blog post.

– © AFP, 2012

Why has Microsoft taken a $6.2 billion hit? >

Cyber attacks lead to €64 million stolen from banks >