Yahoo’s ongoing legal troubles related to the biggest data breach in history appear to be coming to a close. It has submitted a settlement to a US district court agreeing to pay victims $US50 million ($70.8 million) along with some other benefits. Anyone who spent time undoing damage from the breach should pay attention.
The settlement was submitted to the court in the Northern District of California late on Monday local time and still requires approval. In it, Yahoo agrees to put $US50 million ($70.8 million) into a fund for victims with claims and it will provide two years of credit monitoring service from AllClear. The latter package is valued by Yahoo’s lawyers at around $US350 ($495).
While it’s unlikely Yahoo will pay AllClear full price, that part of the deal could be the best win for anyone who was affected in the devastating hack of three billion users’ data. Businesses and individuals who suffered financial losses directly related to the hack also have the option to seek reimbursements.
Any user who can show documented losses of time can file a complaint and be awarded $US25 ($35) per hour up to 15 hours for a maximum total of $US375 ($531) in compensation. Any user who does not have documentation but lost time is eligible for up to five hours of compensation totalling $US125 ($177). Users who paid for a premium Yahoo email account can request a 25 per cent refund.
Yahoo did not immediately respond to our request for comment on the settlement.
Assuming it’s approved, the settlement should close the door on Yahoo’s obligations related to hacks that began in 2013. The company did not disclose the breaches until 2016 and the number of users that it admitted were affected continued to balloon over time. In late 2017 it finally put the number of victims at three billion users.
Its failure to disclose the breach resulted in a $US35 million ($50 million) fine from the SEC earlier this year.
The revelation of the hack came after Yahoo had already agreed to a $US4.83 billion ($6.8 billion) acquisition by Verizon. The deal briefly stalled before Verizon was given a $US350 million ($495 million) discount.
Verizon subsequently formed a subsidiary, Oath, that will pay out $US15 million ($21 million) worth of the user settlement. A holding company set up for Yahoo’s Asian investments, Altaba, will pay the other $US35 million ($50 million).
According to the Associated Press, some experts estimated that Yahoo could have faced up to a billion dollar payout if the case had gone to court.
A hearing on the settlement is scheduled in San Jose on November 29.