Log In


Reset Password
  • MENU
    Local
    Saturday, May 11, 2024

    The SEC is reportedly probing Yahoo over its data breaches

    WASHINGTON — Federal officials are investigating Yahoo over how promptly the beleaguered Internet company informed the public about its historic data breaches that together affected more than 1 billion consumers, according to a report by the Wall Street Journal.

    The probe will reportedly seek to determine why Yahoo waited weeks to disclose knowledge last year of a hack that had occurred in 2014, an incident that compromised 500 million user accounts. An even earlier breach, in 2013, left about a billion customers at risk, though it was not until last fall that Yahoo discovered evidence of that attack, as well.

    The investigation is being handled by the Securities and Exchange Commission, which in 2011 began requiring companies to disclose information about hacking risks or incidents that may affect investors in a "material" way. And it could become a major test case that lays down clearer expectations about when businesses must reveal that information, analysts say.

    Opened in December, the investigation is in its early stages, according to the Journal, and while it could lead to an enforcement action by the agency, such steps are rare. The SEC declined to comment for this story.

    Shortly after Yahoo made its discovery of the 2014 hack public, critics called on the SEC for a deeper look at the company's conduct. In September, Sen. Mark Warner, D-Va., said in a letter to the agency that Americans had the right to know "what senior executives at Yahoo knew of the breach, and when they knew it."

    Yahoo declined to comment for this story, pointing to regulatory filings that say the company is cooperating with government officials - including those from the SEC - examining the hack.

    But the probe's implications stretch far beyond Yahoo's immediate business. It also raises fresh questions for the telecommunications giant Verizon, which is in the midst of a $4.8 billion deal to acquire the former Web titan.

    "I think it's going to get a lot uglier for Yahoo going forward over the next year," said Jeff Kagan, an independent technology and telecom analyst.

    Verizon declined to comment. But executives have voiced strong concerns about the hacks, signaling in October that they may have had a significant impact on Yahoo's core business. Analysts say that a concrete finding of that sort by Verizon could allow it to renegotiate terms or even abandon the purchase altogether.

    Verizon aims to use Yahoo's massive online audience - which ranks near the likes of Google and Facebook - to drive ad impressions and improve its data targeting. But the company must now balance those potential gains against the possibility that Yahoo may discover even more data breaches, analysts say - posing new potential risks and liability to Verizon that could lead to reputational or even monetary losses.

    "We are already seeing the short-term impact on the Verizon deal, but it will be many months and even years before we see the true extent of the damage caused by Yahoo's 1 billion account breach," said George Avetisov, chief executive of the biometric security firm HYPR Corp.

    Verizon had expected the deal to close sometime in the first quarter.

    The fate of the deal remains in doubt as Marni Walden, Verizon's president of product innovation and new businesses, said earlier this month she was unsure whether it would go through.

    "I can't sit here today and say with confidence one way or another, because we still don't know," she told an investor conference.

    Yahoo is expected on Monday to report its quarterly earnings after the bell. Shares of Yahoo were up nearly 0.2 percent early Monday afternoon.

    ---

    The Washington Post's Renae Merle contributed to this report.

    Comment threads are monitored for 48 hours after publication and then closed.