Yahoo! / BT data hack

Manxman_in_exile

I'd be grateful for any advice as to whether I need to do anything other than change my BT email account password after last week's news about the Yahoo! data hack?


I understand names, BT email addresses, 'phone numbers and email passwords were stolen.


We don't do internet banking and we're very cautious about ever putting any sensitive financial information or passwords into emails so I'm hoping a change of email password is all that would be necessary.


Obviously we do buy things over the internet (with associated web-site and payment card passwords) but only through https: websites so I'm assuming they don't need changing just for this data hack.


Thanks
(PS - I'm also posting this on the Broadband & internet access board)

Jivesinger

I changed my password about a week ago, but then had an email a few days later saying that if I didn't change my password and security question within 7 days, they would lock my account.

From which I take it that anyone affected needs to change their security question as well. I think this needs to be done on the primary account.

Of course if you had used that username/password combination to login anywhere else, the password would need to be changed in those places as well.

SuzieSue

You can also set up a 2-step validation process so that they text a code to your mobile if you log in from a new computer. The MSE guide about the hack recommends you do that.

AnotherJoe

Well, it depends. If you are one of the many people that use the same password across multiple services, you need to change all those as well. If you didn't do that then you should be good.

I've also set up 2 step validation for some of my key accounts, bit of a pain but worth it for peace of mind.

BTW the other thing you should do,as well as change security questions, is never use real facts for them.eg "where were you born" should be random characters as in any other password rather than (say). "London" if that's where you were born. That's how many targeted hacks happen. . This does imply the need for a good password manager program, and one that is backed up as well.

Manxman_in_exile

Thanks to all of you who have responded so far.


I used to work in the NHS which was very keen on separate passwords for different purposes and I've carried this discipline through into my personal activities. Thus I don't use the same password for different website accounts.


thanks again.

buglawton

Jivesinger wrote: »

I changed my password about a week ago, but then had an email a few days later saying that if I didn't change my password and security question within 7 days, they would lock my account.

From which I take it that anyone affected needs to change their security question as well. I think this needs to be done on the primary account.

Of course if you had used that username/password combination to login anywhere else, the password would need to be changed in those places as well.

After the previous Yahoo hack revelation about a year ago, I found a new option to disable the security questions. I expected to be able to re-enable them and change them. But found in fact you can't re-enable them. Very confusing. To any banks out the I'd say that world+dog now knows all their customers mothers maiden names.

forgotmyname

Spotted a post on anotehr forum saying the Yahoo account details are available for sale.

Whether its a genuine list, or scammers with some fake details who knows?

Luckily i never use my real name or other details, Place of birth "Sea of Tranquility" Guess that one then and try to trace me through it..

Manxman_in_exile

Hi Guys -thanks for the advice.


I've got two "BT" email accounts - one apparently with "BT Mail" and the other with "BT/Yahoo"(???).


The former email is very un-user friendly whereas the latter is much more intuitive. However, changing the password on the former was much easier than the latter, which took ages for me to work out. (But maybe that's a security device!)


It would seem (after extensive and very time consuming experimentation) that some email providers have a wider definition of "punctuation marks" than most English educated people do.


Thanks again