2014 Yahoo! malware attack
| Industry | Internet services |
|---|
Paid inclusion dispute
In March 2004, Yahoo! introduced a paid inclusion initiative that assured commercial websites placement within its search results upon payment. Although financially beneficial, this program attracted criticism from advertisers unwilling to pay and users displeased that paid listings appeared identical to organic search results. By October 2006, the program no longer guaranteed guaranteed listings but instead provided advantages such as more frequent crawling of sites, access to search analytics, and supplementary smart links displayed beneath URLs.
Adware and spyware issues
Yahoo! encountered backlash for its indirect support of spyware and adware, as advertisements from its clients frequently appeared in pop-up windows generated by adware installed unknowingly by users through bundled software offers. Former sales representatives indicated that the volume of these pop-ups, linked to partnerships with advertising distributors Walnut Ventures and Direct Revenue, varied depending on Yahoo!’s immediate revenue requirements.
Operations within the People's Republic of China
Yahoo!, along with Google China, Microsoft, Cisco, AOL, Skype, and Nortel, collaborated with the Chinese Communist Party to enforce internet censorship across mainland China.
In contrast to Google and Microsoft, which generally safeguard user data outside mainland China, Yahoo! openly acknowledged its inability to protect the privacy of customers based in mainland China from government surveillance.
Critics contend these corporations prioritize financial gain over ethical standards. Organizations such as Human Rights Watch and Reporters Without Borders emphasize the paradox of companies dependent on information freedom facilitating censorship measures.
Shi Tao
In April 2005, journalist Shi Tao received a 10-year prison sentence from the Changsha Intermediate People's Court in Hunan Province, China, charged with "disclosing state secrets to foreign entities." The disclosed material—a list detailing censorship directives—was transmitted via a Yahoo! Mail account to the Asia Democracy Forum ahead of the anniversary of the 1989 Tiananmen Square protests and massacre.
The official Chinese verdict revealed that Yahoo! Holdings, its Hong Kong-based subsidiary, supplied authorities with the IP address associated with Shi Tao’s newspaper, facilitating his detention. In February 2006, Yahoo! issued a statement to the U.S. Congress denying full awareness of the case's specifics. Following this, Yahoo! Holdings (Hong Kong) became subject to an investigation by Hong Kong's Privacy Commissioner for Personal Data.
On 2 June 2006, the UK and Ireland journalists' union (NUJ) called upon its 40,000 members to boycott all Yahoo! products in protest against the company's conduct in China.
Documents released in July 2007 disclosed a Chinese warrant demanding Yahoo! provide "all login times, corresponding IP addresses, and relevant email content" related to Shi Tao’s account starting February 2004. This contradicted earlier Congressional testimony from Yahoo!. Human rights organizations and analysts condemned Yahoo! for cooperating with Chinese authorities.
Yahoo! asserts it is obligated to adhere to local laws within all jurisdictions where it operates.
Li Zhi
In February 2006, criticism against Yahoo! escalated following revelations by Reporters Without Borders that the company had assisted Chinese officials in the case involving dissident Li Zhi. Li Zhi had been sentenced in December 2003 to eight years in prison on charges of "inciting subversion."
Wang Xiaoning
Wang Xiaoning, an engineer and political dissident from Shenyang, China, was detained after advocating for democratic reforms within a Yahoo! group during 2000–2001. In September 2002, Yahoo! supplied information to Chinese authorities that contributed to his arrest. Subsequently, in 2003, Wang was found guilty of "incitement to subvert state power" and received a ten-year sentence.
In April 2007, Wang’s spouse, Yu Ling, initiated legal action against Yahoo! in a U.S. federal court alleging human rights abuses, accusing the company of negligence that led to Wang’s detention. The lawsuit, backed by the World Organization for Human Rights USA, emphasized Yahoo!’s cooperation with Chinese officials despite awareness of potential consequences.
This cooperation was consistent with Yahoo!’s approach to preserving its presence in the Chinese market following prior service interruptions. Reports indicated that under governmental pressure, Yahoo! first disabled Wang’s original account and later provided data on his subsequent account, which facilitated his arrest.
Human rights organizations based their legal claims on the Alien Tort Claims Act—a U.S. statute permitting jurisdiction over foreign human rights violations involving corporations—a strategy employed against various companies since the 1980s.
In August 2007, the World Organization for Human Rights filed suit against Yahoo! for disclosing user information to Chinese authorities, resulting in the imprisonment of journalists such as Shi Tao and Wang Xiaoning. Yahoo! responded by affirming its commitment to privacy and freedom of expression while collaborating with technology firms on human rights initiatives.
In November 2007, a U.S. congressional committee censured Yahoo! for failing to provide complete information to the House Foreign Affairs Committee, characterizing its behavior as "at best inexcusably negligent" and potentially "deceptive."
User-created chat rooms, message boards, and profiles
Amid media concerns over online predators targeting children and declining advertising revenue, Yahoo! discontinued its user-generated chat rooms in June 2005. Subsequently, on December 19, 2006, Yahoo! News terminated its message boards due to persistent trolling problems. Furthermore, in October 2008, Yahoo! removed millions of user profiles without prior notification or explanation.
Image search
On May 25, 2006, Yahoo!’s image search feature attracted criticism for displaying explicit sexual content despite SafeSearch being activated. The issue came to light when a teacher sought to use the service for an educational project. Yahoo! acknowledged the malfunction and pledged prompt corrective measures.
Shark fin controversy
Yahoo! held a 14.95% ownership stake in Alibaba Group, which faced criticism for enabling sales of products derived from sharks. Yahoo! executives pointed out that shark product sales were lawful within Asia and rooted in long-established cultural customs. Alibaba subsequently prohibited shark fin transactions on its platform in 2009.
Geocities closure
Geocities, a web hosting platform established in 1994, was reportedly ranked as the third most visited website globally at the time of its acquisition by Yahoo! in January 1999. Despite its widespread popularity, it had yet to achieve profitability by late 1998.
Yahoo! discontinued Geocities in 2009, resulting in the deletion of millions of hosted web pages. Even shortly before its shutdown in September 2009, the site still attracted over ten million unique visitors.
Internet analyst Vijay Mukhi criticized Yahoo!’s handling of Geocities as "a missed opportunity," suggesting it could have evolved into a social platform akin to Facebook. Rich Skrenta, CEO of Blekko, publicly proposed taking over Geocities from Yahoo! in exchange for a fifty percent share of future revenues.
Yahoo! Groups overhaul 2010
In August 2010, Yahoo! Groups rolled out a significant software upgrade that received widespread criticism from its user base. Responding to the backlash, Jim Stoneham, Vice President of Yahoo!'s Communities division, announced on September 29, 2010, that the company would revert the changes following extensive member feedback.
Flickr revamp 2013
On May 20, 2013, Yahoo! unveiled a revamped design for its photo and video hosting service, Flickr. The update introduced features such as one terabyte of complimentary storage, an uninterrupted photostream, cover photos, and a refreshed Android application. The redesign prioritized high-definition imagery and fluid layouts, highlighting recent photo comments directly on the homepage. While TechRadar interpreted this as a major strategic pivot for Flickr, numerous users voiced their dissatisfaction, resulting in thousands of critical remarks on the platform’s support forum.
Malware incident 2014
In January 2014, Dutch cybersecurity firm Fox IT revealed a widespread malware campaign targeting Java, which had been active since December 30, 2013. This attack predominantly impacted users in Romania, France, and the United Kingdom and was delivering malicious software to approximately 300,000 Yahoo! users every hour at the time of detection. Yahoo! faced scrutiny for not issuing public notifications regarding the extent of affected accounts or guidance on how users could protect themselves.
Data security breaches
During the second half of 2016, Yahoo! disclosed two significant data breaches. The first breach was revealed in September 2016 and dated back to late 2014, compromising more than 500 million user accounts. The second breach came to light in December 2016; it originated from August 2013 and affected over one billion accounts. These incidents rank among the largest data breaches ever recorded online, exposing personal details such as names, email addresses, phone numbers, birthdates, security questions and answers (both encrypted and unencrypted), along with encrypted passwords. Notably, the 2014 breach involved counterfeit web cookies that enabled attackers to access user accounts without needing passwords.
Claims of discrimination against male employees
Scott Ard, who served as editorial director before being dismissed from Yahoo in 2015, filed a lawsuit accusing then-CEO Marissa Mayer of orchestrating a discriminatory campaign against male staff members. Ard alleged that Mayer directed management to manipulate the employee performance evaluation system to justify biased treatment toward men. Despite consistently receiving "fully satisfactory" ratings since joining in 2011 as head of editorial programming for Yahoo's homepage, Ard was replaced by a woman recently appointed by Megan Lieberman, editor-in-chief of Yahoo News.
The lawsuit asserts:
A second gender discrimination suit was brought forward by Gregory Anderson, who was terminated in 2014 and claimed that the company’s performance review process was arbitrary and unjust. This represented the second such legal challenge faced by Yahoo and Mayer during 2016.
Unauthorized access to user accounts
In October 2019, former Yahoo engineer Reyes Daniel Ruiz admitted guilt to federal charges related to unlawfully accessing roughly 6,000 user accounts. His unauthorized intrusions included accounts belonging to friends, colleagues, and others. The breaches involved accessing private sexual images and videos, raising serious concerns about internal security protocols at Yahoo.