Telecom has been urging customers to change passwords for their Xtra email accounts after a security breach.
the company has cancelled thousands of passwords and says they’ve been assured by Yahoo the problem is now sorted.
. . . Institute of IT Professionals NZ CEO told NBR ONLINE over the weekend that his members continue to investigate the possibility that Xtra address books and email were downloaded for later use by the hackers. Telecom and Yahoo acknowledge the nature of the Yahoo mail server security breach meant it was possible this had taken place. But both say there is so far no evidence it happened. Mr Matthews asks if there’s any evidence it didn’t.
The direct mail server security breach meant phishing emails were sent to the contacts of some people who were not actively using their Xtra account, let alone clicking on a dodgy link. . .
Ours was one of the accounts which had its password cancelled and we had no trouble resetting it.
But no evidence that address books and emails were downloaded for later use could just mean they haven’t been used yet.

[...] How safe is changed password? (homepaddock.wordpress.com) [...]