skip to main content

Yahoo! Privacy Breach Class Action

Updated - March 25, 2024

Yahoo Claims Program To Begin!

The court has authorized the claims  program to begin.  Claims can be submitted starting in May 2024.  For more information go to the web site for the claims administrator at https://www.yahooclassaction.com/

The Court has approved another round of notice.

Update - November 23, 2023

The settlement of this class action was approved in Toronto on February 9, 2021 but payment to the class members has been delayed because of a proposed class proceeding filed in Saskatchewan by Ms. Emily Larocque represented by the Merchant Law Group.

The Larocque Proceedings Have Delayed the Settlement Distribution

Ms. Larocque’s counsel appeared at the settlement approval hearing in Toronto to oppose the settlement. The judge rejected Ms. Larocque’s objections finding the settlement to be fair and reasonable.

Next, Ms. Larocque opposed the settlement at a hearing before a judge of the Saskatchewan King’s Bench. Once again, she lost. The judge found the settlement to be reasonable.

Next, Ms. LaRocque appealed that decision to the Saskatchewan Court of Appeal. Her appeal was dismissed on May 25, 2023. The Court of Appeal found the judge did not err in approving the settlement.

Next, Ms. Larocque brought an application for leave to appeal to the Supreme Court of Canada. The application for leave to appeal has yet to be decided. We expect the decision in the next few months.

Current Status

Class members are unable to receive their compensation until the Supreme Court of Canada decides whether Ms. LaRocque should be granted leave to appeal. If the application for leave to appeal is dismissed, then hopefully the claims distribution program will begin.


May 31, 2022

Settlement is Approved in Saskatchewan

On May 25, 2022 the Court of Queens Bench approved the settlement, paving the way for the claims administration to proceed subject to there being an appeal from the decision. See decision here.

February 11, 2021

Court Approves Yahoo Settlement 

On February 9, 2021 a judge of the Ontario Superior Court of Justice found the settlement of the Yahoo Privacy Breach class action to be fair, reasonable and in the best interest of the class  members. To read the judge's decision please click here. Please continue to check the settlement administrator website for updates on submitting claims which can be found here

 

January 11, 2021

Yahoo Settlement Approval Hearing

On January 8, 2021, the Superior Court of Justice conducted the settlement approval hearing. The Court has reserved its decision on whether to approve the settlement. Claims cannot be submitted until the Court renders its decision. We expect a decision to be rendered within the next 6-8 weeks. Please continue to check the status by visiting the claims administrator’s website here.

 

January 5, 2021

Virtual Settlement Approval Hearing

The virtual settlement approval hearing will take place on Friday, January 8, 2021, at 10:00 a.m. ET at Osgoode Hall, 130 Queen Street West, Toronto, Ontario. Class Members and members of the public may attend the virtual settlement approval hearing but are not required to do so.

 

Three Privacy Breaches at Yahoo

In 2016, Charney Lawyers PC commenced a class action against Yahoo! Inc. and Yahoo! Canada Co. arising out of three cyberbreaches occurring in 2013 through 2016 (the “2013 Breach”, the “2014 Breach” and the “Cookies Breach”).

On August 26, 2020, the Ontario Superior Court of Justice certified the class action on consent for settlement purposes and scheduled a date for the settlement approval hearing. See the decision here.

On September 21, 2020, the claims administrator, RicePoint Administration Inc. (“RicePoint”) started to disseminate the notice of certification and proposed settlement to class members by direct e-mail.

The deadline to opt-out of the settlement is Monday, December 21, 2020.

The virtual settlement approval hearing will take place on Friday, January 8, 2021, at 10:00 a.m. ET at Osgoode Hall, 130 Queen Street West, Toronto, Ontario.

On September 22, 2016, Yahoo announced that the account information of 500 million users had been stolen in a hack in late 2014.

On December 14, 2016, Yahoo announced that the account information of over one billion users had been stolen in a separate hack in August 2013.

On December 14, 2016, Yahoo also indicated that an unspecified number of user accounts were accessed throughout 2015 and 2016 in a third, separate cyberattack involving forged cookies.

Yahoo has confirmed that users’ real names, email addresses, telephone numbers, encrypted/unencrypted security questions and answers, dates of birth and hashed passwords have all been leaked.

Many Canadian users of Yahoo will be affected. This may include Canadians who used Yahoo! Mail, Answers, Auto, Finance, Groups, Messenger, and so on, in addition to Flickr, Sky, Tumblr and others.

April 2017: we are aware that there have been updates related to the criminal investigations concerning to these privacy breaches.

Relevant Documents

  1. Short Form Notice.
  2. Long Form Notice.
  3. Settlement Agreement.

For more information, please visit RicePoint’s website at: http://www.yahooclassaction.com/

FAQ

  1. Is the notice I received from RicePoint real?
    Yes.
  2. Do I have to fill out a claims form?
    Not at this time.
  3. What happens if the settlement is approved?
    You may be eligible for compensation, as set out in the Short Form Notice and the Long Form Notice.
  4. When do I make a claim?
    After the settlement approval hearing, RicePoint will post more information on its website, so please check it regularly for updates.
  5. What happens if the settlement is not approved?
    The litigation will continue.

Yahoo’s Public Statements

Yahoo notified some affected users by email, and published notices online.

Yahoo Privacy Breach Class Action Lawsuit

Charney Lawyers PC is commencing a national class proceeding lawsuit on behalf of Canadians whose Yahoo account information was stolen in the data breaches described above. The plaintiff asserts that Yahoo failed to adequately protect its users’ information and to adequately notify its users after the hacks.

What to Do Next?

All users of Yahoo services should immediately change their passwords with Yahoo and with any other websites/programs using the same password.

All users should clear their cookies, and continue to do so regularly.

Anyone who believes their identity may have been compromised should immediately notify their banks and credit card companies, and continue to monitor their accounts for suspicious activities. Affected individuals should also consider contacting a credit bureau such as TransUnion Canada or Equifax to determine whether there have been any unauthorized transactions on their accounts to explore options to purchase credit protection services.

IMPORTANT NOTE:

The site is not designed to answer questions about your individual situation or entitlement. Do not rely upon the information provided on this website as legal advice in respect of your individual situation nor use it as a substitute for individual legal advice.

The information collected about potential class members will assist counsel in prosecuting the class action and assessing what damages were suffered by the class as a whole. Providing the information requested does not make you the client of Charney Lawyers. The court will ultimately decide who will be included as a class member.

This website will be updated from time to time to provide potential class members with information as it becomes available.