In what may qualify as the second largest data breach ever, Marriott announced today that up to 500 million guests at the company’s Starwood Group hotels have had their personal data stolen. […]

Yahoo, which is now owned by Verizon, has agreed to pay $50 million in damages, plus about $35 million in legal fees, under a proposed civil settlement covering data breaches in 2013 and 2014 that impacted three billion Yahoo accounts, according to numerous press reports.  […]

Altaba, which holds Yahoo’s remaining assets following the purchase of the company’s internet assets by Verizon in 2017, said in a filing with the Securities and Exchange Commission that it has reached an agreement in principle to settle consumer class action litigation relating to Yahoo’s disclosures in 2016 and 2017 of data breaches impacting three billion user accounts. […]

The fact that state actors are forced to use criminal, mercenary hackers in their cyber espionage and attack campaigns is a silver lining to law enforcement looking to identify and catch the perpetrators, according to Adam Hickey, deputy assistant attorney general for national asset protection at the Department of Justice. […]

The Department of Justice today released an indictment of four men involved in the 2016 hack of Yahoo email accounts, two of whom were acting in their capacity as Russian FSB officers. […]