skip to main content
1875 KB

Yahoo! Privacy Breach Class Action

May 31, 2022

Settlement is Approved in Saskatchewan

On May 25, 2022 the Court of Queens Bench approved the settlement, paving the way for the claims administration to proceed subject to there being an appeal from the decision. See decision here.

February 11, 2021

Court Approves Yahoo Settlement 

On February 9, 2021 a judge of the Ontario Superior Court of Justice found the settlement of the Yahoo Privacy Breach class action to be fair, reasonable and in the best interest of the class  members. To read the judge's decision please click here. Please continue to check the settlement administrator website for updates on submitting claims which can be found here


January 11, 2021

Yahoo Settlement Approval Hearing

On January 8, 2021, the Superior Court of Justice conducted the settlement approval hearing. The Court has reserved its decision on whether to approve the settlement. Claims cannot be submitted until the Court renders its decision. We expect a decision to be rendered within the next 6-8 weeks. Please continue to check the status by visiting the claims administrator’s website here.


January 5, 2021

Virtual Settlement Approval Hearing

The virtual settlement approval hearing will take place on Friday, January 8, 2021, at 10:00 a.m. ET at Osgoode Hall, 130 Queen Street West, Toronto, Ontario. Class Members and members of the public may attend the virtual settlement approval hearing but are not required to do so.


Three Privacy Breaches at Yahoo

In 2016, Charney Lawyers PC commenced a class action against Yahoo! Inc. and Yahoo! Canada Co. arising out of three cyberbreaches occurring in 2013 through 2016 (the “2013 Breach”, the “2014 Breach” and the “Cookies Breach”).

On August 26, 2020, the Ontario Superior Court of Justice certified the class action on consent for settlement purposes and scheduled a date for the settlement approval hearing. See the decision here.

On September 21, 2020, the claims administrator, RicePoint Administration Inc. (“RicePoint”) started to disseminate the notice of certification and proposed settlement to class members by direct e-mail.

The deadline to opt-out of the settlement is Monday, December 21, 2020.

The virtual settlement approval hearing will take place on Friday, January 8, 2021, at 10:00 a.m. ET at Osgoode Hall, 130 Queen Street West, Toronto, Ontario.

On September 22, 2016, Yahoo announced that the account information of 500 million users had been stolen in a hack in late 2014.

On December 14, 2016, Yahoo announced that the account information of over one billion users had been stolen in a separate hack in August 2013.

On December 14, 2016, Yahoo also indicated that an unspecified number of user accounts were accessed throughout 2015 and 2016 in a third, separate cyberattack involving forged cookies.

Yahoo has confirmed that users’ real names, email addresses, telephone numbers, encrypted/unencrypted security questions and answers, dates of birth and hashed passwords have all been leaked.

Many Canadian users of Yahoo will be affected. This may include Canadians who used Yahoo! Mail, Answers, Auto, Finance, Groups, Messenger, and so on, in addition to Flickr, Sky, Tumblr and others.

April 2017: we are aware that there have been updates related to the criminal investigations concerning to these privacy breaches.

Relevant Documents

  1. Short Form Notice.
  2. Long Form Notice.
  3. Settlement Agreement.

For more information, please visit RicePoint’s website at:


  1. Is the notice I received from RicePoint real?
  2. Do I have to fill out a claims form?
    Not at this time.
  3. What happens if the settlement is approved?
    You may be eligible for compensation, as set out in the Short Form Notice and the Long Form Notice.
  4. When do I make a claim?
    After the settlement approval hearing, RicePoint will post more information on its website, so please check it regularly for updates.
  5. What happens if the settlement is not approved?
    The litigation will continue.

Yahoo’s Public Statements

Yahoo notified some affected users by email, and published notices online.

Yahoo Privacy Breach Class Action Lawsuit

Charney Lawyers PC is commencing a national class proceeding lawsuit on behalf of Canadians whose Yahoo account information was stolen in the data breaches described above. The plaintiff asserts that Yahoo failed to adequately protect its users’ information and to adequately notify its users after the hacks.

What to Do Next?

All users of Yahoo services should immediately change their passwords with Yahoo and with any other websites/programs using the same password.

All users should clear their cookies, and continue to do so regularly.

Anyone who believes their identity may have been compromised should immediately notify their banks and credit card companies, and continue to monitor their accounts for suspicious activities. Affected individuals should also consider contacting a credit bureau such as TransUnion Canada or Equifax to determine whether there have been any unauthorized transactions on their accounts to explore options to purchase credit protection services.


The site is not designed to answer questions about your individual situation or entitlement. Do not rely upon the information provided on this website as legal advice in respect of your individual situation nor use it as a substitute for individual legal advice.

The information collected about potential class members will assist counsel in prosecuting the class action and assessing what damages were suffered by the class as a whole. Providing the information requested does not make you the client of Charney Lawyers. The court will ultimately decide who will be included as a class member.

This website will be updated from time to time to provide potential class members with information as it becomes available.