data breach

Altaba is Fined $35M For Not Disclosing World’s Largest Data Breach

Altaba, formerly Yahoo! Inc., will pay a $35M penalty in a data breach settlement to resolve US Securities and Exchange Commission charges accusing the entity of misleading investors because it did not disclose a major cyber-security data breach. Despite settling, Yahoo is not denying or admitting to the findings.

The data breach, one of the largest in the world to date, involved Russian hackers stealing personal information involving hundreds of millions of user accounts in 2014. The information that was taken included usernames, birth dates, email addresses, passwords that were encrypted, phone numbers, and both security questions and answers. Yahoo’s information security team found out about the breach soon after it happened.

The US Securities and Exchange Commission has filed insider trading charges against Jun Ying, the ex-chief information officer of an Equifax US business unit. The regulator contends that Ying engaged in insider trading in 2007 before the consumer credit reporting agency announced that there had been a major data breach exposing personal information of approximately 148 million customers in the US. Among the information that was disclosed were social security numbers, names, addresses, and birth dates.

The Commission’s complaint accuses Yin of using confidential information to determine that Equifax had experienced a major breach. The SEC said that before the company disclosed the information breach, Ying exercised all the Equifax stock options he had vested and made almost $1M when he sold the shares. The regulator claims that Ying was able to avoid losing over $117K by selling the shares when he did.

Now, the SEC, which has filed charges against Ying accusing him of violating federal securities laws’ antifraud provisions, is pursuing ill-gotten gains, interest, injunctive relief, and penalties against him. Ying resigned from Equifax after the company found out about his trades and reportedly made plans to let him go. US prosecutors have filed a parallel criminal case against Ying.

Articles Tagged with data breach

SECURITIES CASES: YAHOO AGREES TO PAY $35M TO SETTLE CHARGES AND A BIOTECH START UP IS ACCUSED OF ISSUING MISLEADING INFORMATION

Altaba is Fined $35M For Not Disclosing World’s Largest Data Breach

Ex-Equifax Trader is Accused of Insider Trading Before Data Breach News Was Disclosed to the Public