Spark caught up in Yahoo hack

Spark is advising its Xtra customers to change their password and security questions following the revelation its email partner Yahoo was hacked in 2014.

The multinational tech company announced on Friday that some of its user account information was stolen from Yahoo's global network back in November 2014, which included some of Spark Xtra email customers' data.


File Photo.

Yahoo believes information associated to at least 500 million user accounts were stolen by what it describes as a 'state-sponsored actor”.

Some of the information may have included names, email addresses, telephone numbers, dates of birth, bycrpt-protected hashed passwords, plus encrypted or unencrypted security questions and answers.

'Spark will be communicating directly with customers who we believe may have been impacted as soon as we have more information,” says spokeswoman Michelle Baguley.

'Yahoo has no evidence that the stolen bcrypt-protected passwords or security questions and answers were used to gain unauthorized access to Spark accounts.”

Yahoo's investigation into the hack suggests the stolen information did not include unprotected passwords, payment card data, or bank account information. Payment card data and bank account information are not stored in the system that was affected by the hack.

Spark is now reminding all its customers to change their password and security questions for their Xtra account and any other account which they used the same or similar information.

'To maintain a secure online profile, Spark advises all Xtra users to regularly update account settings with a strong, difficult-to-predict password.

'All Xtra customers who have not changed their password or security questions since 2014, or are unsure if they have, should do so now on the Spark website.”

Michelle says Spark is currently in the process of preparing to move all of its email system back home to New Zealand, with a number of customers already receiving requests to register on the company's website.

'We thank those customers who have already registered and encourage those who have not registered, to do so. If you've already registered to have your email moved to SMX, you don't need to do that again – any changes you make to your password will be applied to the new system.”

To change your Xtra email password or security questions visit: www.spark.co.nz/changepassword

You may also like....

4 comments

Why the delay

Posted on 24-09-2016 10:26 | By flyingtoaster

Spark is only now making an issue of this? This happened in November 2014, thats almost 2 years ago. Why have they been so slack in this regard?


Ahh Duh

Posted on 24-09-2016 11:50 | By CC8

THEY DIDN"T KNOW ABOUT IT ...until YAHOO told them recently.DUH!


Left them

Posted on 24-09-2016 14:26 | By Merlin

Left them years ago. To much trouble when Yahoo became their contracted email provider.Service leaves a lot to be desired.


Not Suprised

Posted on 26-09-2016 05:33 | By My login Vault

Apparently the hack was 2 years ago. Does not give you a lot of trust in these companies. I cant believe the security questions were stored in plain text!!!


Leave a Comment


You must be logged in to make a comment.