Senate Commerce Leaders Seek Answers From Yahoo CEO on 2013, 2014 Data Breaches

Senate Commerce Committee Chairman John Thune, R-S.D., and Senate Commerce Consumer Protection Subcommittee Chairman Jerry Moran, R-Kan., sought answers Friday from Yahoo CEO Marissa Mayer on the internet company’s massive data breaches in 2013 and 2014 (see 1612140076 and 1609220046). Yahoo is facing at least two dozen lawsuits over the data breaches, which may have compromised up to a combined 1.5 billion user accounts (see 1612230029). Verizon indicated in late January it was still assessing the impact of the breaches as it evaluates whether to proceed with its planned $4.83 billion acquisition of Yahoo (see 1701240048). “Despite several inquiries by Committee staff seeking information about the security of Yahoo! user accounts, company officials have thus far been unable to provide answers to many basic questions about the reported breaches,” said Thune and Moran in a letter to Mayer. They said the company's cancellation of a planned Jan. 31 briefing with Senate Commerce staff also “prompted concerns about the company’s willingness to deal with Congress with complete candor about these recent events. We hope that you will dispel these concerns.” Moran and Thune sought information on how many users were affected by the Yahoo breaches, the company’s “efforts to identify and provide notice to these users,” and a timeline on the breaches. The senators also sought information on what data may have been compromised in the breaches and what steps Yahoo is taking to mitigate harm to affected users and to improve its cybersecurity. Mayer must submit answers to Senate Commerce by Feb. 23, Moran and Thune said. Yahoo is "in receipt of the letter, reviewing it and will respond as appropriate," a spokeswoman said.