Telecom NZ says 22,500 Xtra email accounts hacked

Powered by SC Magazine

Yahoo! 'assures' password changes kill spam.

Telecom NZ has conceded that some 22,500 users of its Yahoo! Xtra email customers have been hacked.

Users of the Yahoo! Xtra email service, operated by Yahoo! and open only to Telecom NZ subscribers, were targeted by hackers last weekend.

The service has attracted about 450,000 subscribers, of which five percent were affected.

Read: Choosing a good passw0rd

"Telecom, in conjunction with email provider Yahoo!, has identified that up to approximately five percent of Yahoo! Xtra email customer accounts have been sending malicious emails – most likely without the customer’s knowledge, after their email account was accessed," the telco said in a statement.

Some 50,000 subscribers have changed their passwords since accounts were compromised last weekend.

Yahoo! said attackers gained access to customer account email addresses but had "currently no evidence" that further information was compromised.

However, Telecom NZ is following up with customer reports that more data was accessed.

Yahoo! could lose its email outsourcing deal with the telco following the breach, according to a Telecom NZ spokesperson, who indicated the service may be pulled in-house.

Telecom NZ retail boss Chris Quin says Yahoo! "has given Telecom an assurance" that the spamming will stop if users change their passwords.

Hacked users won't have a choice however, as the telco kicks off a password refresh program. It will warn customers by email and phone, including 10,000 today.

“If customers are not able to personally change their password within around 24 hours of our notification, we have a contingency process in place which will require customers to change their password the next time they access their email account,” Quin said.

It urged any users who receive spam from contacts to send a new email to the victim asking them to change their passwords.

“We would like to thank the around 5000 affected customers who have changed their passwords in recent days. Yahoo! has assured us that malicious emails are no longer being sent from these accounts,” the telco said in a statement.

Copyright © SC Magazine, Australia

Telecom NZ says 22,500 Xtra email accounts hacked
Top Stories
Myer CIO named retailer's new chief executive
Richard Umbers to lead data-driven retail strategy.
Empty terminals and mountains of data
Qantas CIO Luc Hennekens says no-one is safe from digital disruption.
BoQ takes $10m hit on Salesforce CRM
Regulatory hurdles end cloud pilot.
Sign up to receive iTnews email bulletins
Latest Comments
Who do you trust most to protect your private data?

   |   View results
Your bank
Your insurance company
A technology company (Google, Facebook et al)
Your telco, ISP or utility
A retailer (Coles, Woolworths et al)
A Federal Government agency (ATO, Centrelink etc)
An Australian law enforcement agency (AFP, ASIO et al)
A State Government agency (Health dept, etc)

Do you support the abolition of the Office of the Information Commissioner?

   |   View results
I support shutting down the OAIC.
I DON'T support shutting the OAIC.