Yahoo issues password reset advice in wake of Japanese hack

Password and username box

Hackers have stolen the login names of 22 million Yahoo users in Japan, prompting the internet search giant to urge people to change their passwords immediately.

The company said the details were contained in a file that may have been stolen during an attack on its systems, which was picked up by Yahoo on 16 May.

"We don't know if the file (of 22 million user IDs) was leaked or not, but we can't deny the possibility given the volume of traffic between our server and external [terminals]," said the company in a statement to AFP.

However, the company has been quick to stress that no information that would allow the hackers to seize control of users' accounts was pilfered during attack.

Even so, the company is urging users to change their passwords as a precautionary measure.

According to reports, Yahoo Japan has around 200 million members, which means the attack could have affected around 10 per cent of the country's total user base.

Ross Brewer, managing director and vice president for international markets at security vendor LogRhythm, said Yahoo should be commended for coming clean about the attack.

"[Yahoo] should also be commended for providing its members with actionable advice on how to stop hackers from compromising their individual accounts," said Brewer.

"However, in the aftermath of any breach, it's also absolutely vital to investigate how the attackers managed to get in, and then use this intelligence to beef up security defences in the future."

Caroline Donnelly is the news and analysis editor of IT Pro and its sister site Cloud Pro, and covers general news, as well as the storage, security, public sector, cloud and Microsoft beats. Caroline has been a member of the IT Pro/Cloud Pro team since March 2012, and has previously worked as a reporter at several B2B publications, including UK channel magazine CRN, and as features writer for local weekly newspaper, The Slough and Windsor Observer. She studied Medical Biochemistry at the University of Leicester and completed a Postgraduate Diploma in Magazine Journalism at PMA Training in 2006.