Ex-Yahoo paying $35M to settle SEC charges over 2014 hack (Update)

April 24, 2018 by Marcy Gordon
Ex-Yahoo paying $35M to settle SEC charges over 2014 hack
In this Dec. 15, 2016, file photo, the Yahoo logo appears on a smartphone in Frankfurt, Germany. The company formerly known as Yahoo is paying a $35 million fine to resolve federal regulators' charges that the online pioneer deceived investors by failing to disclose one of the biggest data breaches in internet history. The Securities and Exchange Commission announced the action Tuesday, April 24, 2018, against the company, which is now called Altaba after its most valuable parts were sold to Verizon Communications for $4.48 billion last year.. (AP Photo/Michael Probst, File)

The company formerly known as Yahoo is paying a $35 million fine to resolve federal regulators' charges that the online pioneer deceived investors by failing to disclose one of the biggest data breaches in internet history.

The Securities and Exchange Commission announced the action Tuesday against the company, which is now called Altaba after its email and other digital services were sold to Verizon Communications for $4.48 billion last year. Yahoo, which is no longer publicly traded, neither admitted nor denied the allegations but did agree to refrain from further violations of securities laws.

Personal data was stolen from hundreds of millions of Yahoo users in the December 2014 breach attributed to Russian hackers. The SEC alleged that, although Yahoo senior managers and attorneys were told about the breach, the company failed to fully investigate. The breach wasn't disclosed to the investing public until more than two years later, when Yahoo was working on closing Verizon's acquisition of its operating business in 2016, the SEC said.

"Yahoo's failure to have controls and procedures in place to assess its cyber disclosure obligations ended up leaving its investors totally in the dark about a massive data breach," Jina Choi, director of the SEC's San Francisco regional office, said in a statement.

Altaba spokesman Mike Pascale said the New York company declined to comment on the SEC settlement.

Sen. Mark Warner, D-Va., who urged the SEC in September 2016 to investigate whether Yahoo met its obligation to inform the public, said Tuesday that the company's failure to do so "didn't pass the smell test."

"Holding the company accountable is important, and I hope others will learn you can't sweep this kind of thing under the rug," Warner, a member of the Senate Banking Committee, said in a tweet.

Sunnyvale, California-based Yahoo eventually acknowledged that the 2014 hacking attack and a separate one in 2013 brought affected all 3 billion accounts on its service.

Yahoo ended up having to give Verizon a $350 million discount on their deal, reflecting concerns that people might reduce their use of Yahoo email and other digital services because of the breach, decreasing opportunities to show ads.

In scooping up Yahoo's digital services, Verizon's strategy was to meld the operations with its AOL division with an eye to becoming a bigger player in the growing market for digital ads.

Yahoo's most valuable parts—investments in China's e-commerce leader Alibaba, and in Yahoo Japan—were left in Altaba. Yahoo CEO Marissa Mayer, a former Google executive who led Yahoo for nearly five years, did not join Verizon and was out of a job.

Meanwhile, prosecutors said Tuesday that two Russian intelligence agents, Dmitry Dokuchaev and Igor Sushchin, used information they stole from Yahoo to spy on Russian journalists, U.S. and Russian government officials and employees of financial services and other private businesses.

The statements came as a U.S. judge in San Francisco pushed back a sentencing hearing for a 23-year-old Canadian man, Karim Baratov, who prosecutors say was hired by Dokuchaev to breach at least 80 email accounts obtained from the massive Yahoo hack.

Judge Vince Chhabria questioned whether the sentence of seven years and 10 months that prosecutors were seeking for Baratov was longer than what other hackers had received for similar crimes.

Baratov's attorneys have called for a sentence of three years and nine months.

Chhabria stressed that Baratov was not behind the Yahoo hack. He rescheduled the sentencing hearing for May 29.

Authorities have described Baratov as an "international hacker-for-hire" who hacked more than 11,000 webmail accounts from around 2010 until his March 2017 arrest and used the money he made—roughly $1.1 million at about $100 per hacking victim—to finance a $650,000 home and fancy cars, including a Lamborghini and Aston Martin.

Explore further: SEC probing Yahoo over cyberattacks: media

Related Stories

SEC probing Yahoo over cyberattacks: media

January 23, 2017

The US Securities and Exchange Commission has opened an investigation into whether Yahoo should have informed investors sooner about two major data breaches, the Wall Street Journal reported Sunday, citing people familiar ...

Yahoo-Verizon deal set to close June 13

June 8, 2017

Yahoo shareholders voted Thursday to back the sale of the company's internet business to Verizon, clearing the way for the deal to close June 13.

AOL plus Yahoo to equal new Oath

April 4, 2017

AOL and Yahoo will be combined into a unit called Oath after telecom titan Verizon buys the pioneering internet firm, according to a tweet Monday by the AOL chief.

Yahoo names post-spinoff management team

March 13, 2017

Yahoo said Monday that board member and former internet executive Thomas McInerney would lead the business that remains after the sale of its core assets to Verizon is completed.

Recommended for you

Great white shark genome decoded

February 18, 2019

The great white shark is one of the most recognized marine creatures on Earth, generating widespread public fascination and media attention, including spawning one of the most successful movies in Hollywood history. This ...

Light-based production of drug-discovery molecules

February 18, 2019

Photoelectrochemical (PEC) cells are widely studied for the conversion of solar energy into chemical fuels. They use photocathodes and photoanodes to "split" water into hydrogen and oxygen respectively. PEC cells can work ...

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.