The disclosure of Yahoo that it was hacked has led to a lawsuit by a user accusing the internet colossus of gross negligence over a massive 2014 hacking in which information was stolen from at least 500 million accounts.
The lawsuit was filed in the federal court in San Jose, California, on Friday by Ronald Schwartz, a New York resident, on behalf of all Yahoo users in the United States whose personal information was compromised and the suit seeks class-action status and unspecified damages. The lawsuit therefore suggests that Yahoo should have stopped the breach from taking place having been targeted by hackers before.
According to the complaint, Yahoo demonstrated “reckless disregard for the security of its users’ personal information that it promised to protect. It faulted Yahoo for taking roughly three times longer to uncover the breach.
Meanwhile, the Britain Information Commissioner has confirmed that they were affected by the cyber attack and her eight million users have been urged on Friday to change their passwords.
Yahoo believes the hacking of their site was a state-sponsored act, and it is the latest in the growing list of popular social sites to fall victim to a cyber attack, just after Myspace found up to 427m of its users’ information up for sale on the dark web earlier this year, mostly likely the result of a hack before it was redesigned in 2013. 117million users of LinkedIn in 2011 were as well stolen and put up for sale in May that year.
Mr Schwartz is represented by two large US class-action specialists, the law firms Robbins Geller Rudman & Dowd and Labaton Sucharow.