Senators accuse Yahoo of 'unacceptable' delay in hack discovery
By Dustin Volz and Lisa Lambert
WASHINGTON (Reuters) - Six senators on Tuesday demanded that Yahoo Inc (YHOO.O: Quote) explain why hackers' theft of user information for 500 million accounts two years ago came to light only last week and called the company's handling of the breach "unacceptable."
The lawmakers, all Democrats, said they were "disturbed" that the 2014 intrusion, which was disclosed by the company on Thursday, was detected so long after it occurred.
"That means millions of Americans’ data may have been compromised for two years," the senators wrote in a letter to Yahoo Chief Executive Marissa Mayer. "This is unacceptable."
A Yahoo spokesman said the company would respond in a "timely and appropriate manner" to the letter, which was signed by Senators Patrick Leahy, Al Franken, Elizabeth Warren, Richard Blumenthal, Ron Wyden and Edward Markey.
The top U.S. stock market regulator said separately that prompt disclosure by companies of "cyber events" is a priority. Securities and Exchange Commission Chair Mary Jo White, asked about Yahoo, said she could not comment specifically on it.
She earlier said at a conference that SEC examiners in recent months have been checking that companies comply with 2011 agency guidance stressing the need to disclose hacks.
Yahoo has faced mounting questions about exactly when it knew about the 2014 cyber attack that exposed the email credentials of users, a critical issue for the company as it seeks to prevent the breach from affecting a pending takeover of its core business by Verizon Inc (VZ.N: Quote).
The internet firm has said it detected the breach this summer after conducting a security review prompted by an unrelated hacking claim that turned out to be meritless. Yahoo has not given a precise timeline explaining when it was made aware of the 2014 attack, or if it knew of the breach before announcing the deal with Verizon in late July. Continued...