Yahoo UK has been fined £250,000 for a cyber-attack in November 2014 that may have breached more than eight million UK accounts.
Yahoo, which is now owned by Verizon, said in 2016 that at least 500 million accounts worldwide had been hacked two years earlier.The Information Commissioner’s Office said it focused on the 515,121 UK accounts that London-based Yahoo UK Services oversaw as a data controller. Compromised personal data included names, email addresses, telephone numbers, dates of birth, hashed passwords, and encrypted or unencrypted security questions and answers.
“The failings our investigation identified are not what we expect from a company that had ample opportunity to implement appropriate measures,” said the ICO’s James Dipple-Johnstone. “It’s no good locking the door if you leave the key under the mat.”Yahoo UK did not immediately respond to a request for comment.