Another Yahoo Data Breach

On December 14, Yahoo confirmed a data breach happened in August 2013, one billion user accounts were affected. The stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers. This incident was believed to be distinct from the incident disclosed on September 22. 

HKCERT advises affected users to change their passwords and pay attention to phishing attacks with stolen personal information. For detailed actions, please refer to our previous blog.