Email addresses, passwords and home addresses among swiped data
By Shaun Nichols, 28 Apr 2014 AOL has issued a warning to users that personal information has been stolen by attackers, a week after the security of its servers was questioned.The company on Monday said that the same hackers behind last week's spam deluge were able to infiltrate company servers and lift user information including email addresses, contact lists and home mailing addresses. Additionally, encrypted password and security question answer archives were stolen.
AOL kicked off the investigation last week when users began receiving large amounts of spam from spoofed email addresses. The company believes that the attacks, which circumvented most spam controls, were the result of a mass breach that the company estimates encompassed around 2 per cent of AOL's customer email accounts.
"Importantly, we have no indication that the encryption on the passwords or the answers to security questions was broken," AOL said.
"In addition, at this point in the investigation, there is no indication that this incident resulted in disclosure of users' financial information, including debit and credit cards, which is also fully encrypted."
Full Article
And so it continues...but I am not surprised...really! And they officially confirm what we all suspected.