Yahoo agreed to pay a $50 million settlement and provide two years of credit monitoring services to 200 million people whose information was compromised in the 2013-2014 breach.The incident wasn’t reported until 2016 and Yahoo has agreed to pay a portion of the settlement to compensate account holders with issues arising from the breach at a rate of $25 per hour for time spent dealing with issues arising from the incident, according to the San Francisco Gate.
Those with documented losses can ask for up to $375 while those who can’t can file claims seeking up to five hours’ worth of compensation for time spent dealing with the breach. Account holders who paid between $20 and $50 annually for a premium email account will be eligible for a 25 percent refund.
In addition to the settlement, Altaba Inc., a company set up to hold Yahoo’s investments in Asian companies and other assets, has already paid a $35 million fine to the Securities and Exchange Commission for the delay in disclosing the breach.
The cyberattack, which occurred around June 15, resulted in the theft of patient data including names, dates of birth, medical testing information, laboratory test results, and potentially health insurance information and Social Security numbers (SSNs) for a limited subset of patients.
The incident at McKesson reportedly began with voice phishing (vishing) attacks targeting employees, leading to the compromise of Okta single sign-on accounts.
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news
