Yahoo has said that it learned of its massive, 500 million-victim breach in August, but in the September proxy filing with the Securities and Exchange Commission the company said it was unaware of "any incidents of, or third party claims alleging” security breaches, The Washington Post reports. This has led some to wonder whether the company will run into trouble with the SEC. While some have called for an SEC investigation of the breach, not everyone finds the company’s filing problematic. "From a legal perspective, it’s not deceptive,” said Ballard Spahr’s Kim Phan. “However, it doesn’t mean that they were fulfilling the spirit of the law." Meanwhile, Fortune reports Yahoo Chief Security Officer Bob Lord discussed the hack at the Security Structure event, and Financial Times reports an ID protection company has alleged the hack “was motivated by money,” the report states. (Registration may be required to access this story.)
Full Story