[Gorani:] A reminder of a breaking news story from the United States this hour. A jury has found Dylann Roof guilty of the first 12 counts in his federal trial. The self-declared White supremacists confessed to gunning down nine people at a Charleston, South Carolina church last year, a traditionally African-American church. He could face the death penalty. The judge, by the way, as we speak, is still reading off the other counts. In fact, I'm hearing now that Dylann Roof is guilty on all 33 counts. As I mentioned there, guilty of the murder of nine African-Americans at a church in Charleston, South Carolina. Dylann Roof, breaking news, guilty on all counts. Let's move on now to this story. If you have Yahoo account, you're going to probably want to listen up. It's probably also time to change your password. The company has announced a massive security breach. It happened back in 2013, and more than a billion accounts were exposed. The breach may be one of the largest ever and is thought to be separate from a hack that Yahoo revealed just three months ago. Let's get more from Samuel Burke. He's in the studio with us. So, first of all, I didn't realize there were a billion Yahoo accounts. That was news to me as well as new of the hack. What happened?
[Samuel Burke, Cnnmoney Business And Technology Correspondent:] Well, what's absolutely astonishing about this, Hala, is this hack actually occurred in 2013, and Yahoo, much like us, is just now finding out about this. This is a company that clearly has not invested enough money in cyber security according to experts, and the proof is in the pudding. Just look at what the hackers made off with. You have names, telephone numbers, e-mail addresses, passwords, and dates of birth. Now, what they didn't get away with was information like data from bank accounts and credit cards. Now, Hala, you're probably saying, oh, good, it's a good thing they didn't get that stuff. That's
[Gorani:] I'm not saying that at all.
[Burke:] Well
[Gorani:] That's horrible.
[Burke:] No, but it
[Gorani:] Now, why did it take three years to figure it out?
[Burke:] But listen, it's counterintuitive in the sense that you can change your credit card number, but you can't change your date of birth even though some of us try from time to time.
[Gorani:] Unfortunately.
[Burke:] So listen, that information is what people use to get into other accounts. So that is really the biggest fear here, not that they're going to get into your Yahoo account, but they use that information to get into other accounts.
[Gorani:] But isn't it too late to change your password now if the breach happened in 2013? Isn't it a bit late?
[Burke:] Well, that is what's so alarming. There are steps that you can take, though, to make sure they can't keep on still getting into the Yahoo account and other accounts. So Yahoo is going to force people to change their e-mail addresses. They're suggesting that you delete old e-mails. You know, lots of corporations adopted that policy after the SONY hack. And if you only remember one thing from this report, Hala, use two-factor authentication. Whether it's your credit card, your bank account, or your e-mail, change that setting now. That gives you a unique code sent to your cellphone anytime you log in from a new computer. That way, if the hackers have your password, it doesn't matter. They can't get into your account because the hacker is not going to have your cellphone in all likelihood.
[Gorani:] OK. So if you log in, the two-step authentication is that a notification is sent to your phone.
[Burke:] You use it right? All right.
[Gorani:] Well, yes, I do. In fact, I do because I do receive an e-mail and a text whenever I log in from another device.
[Burke:] OK. Yes, Facebook, Twitter
[Gorani:] Right.
[Burke:] Gmail, I use it on all of those things. And really everybody should be using it because, again, the code comes only to your cellphone when it sees, OK, you're on a new computer. First, you type your password and then you get the code. So the hacker can't get the code because the hacker doesn't have your cellphone.
[Gorani:] That's definitely a good idea. So let's talk a little bit, though, about what to do in the future. You have the two-step authentication. Is that enough, though? I mean
[Burke:] Well, let's
[Gorani:] it seems like nothing is keeping us safe from hackers.
[Burke:] Nothing is 100 percent and really, what we're moving toward in the future, hopefully sooner than later, is using your thumb print more often, using your face. It's hard to imitate people's face. So we are looking at a society without passwords and Lord knows, it could not come soon enough.
[Gorani:] Yes, absolutely. And by the way, there's that big Verizon deal. What's up with that?
[Burke:] Verizon still says they're going through with it. As of now, they haven't cancelled it in spite of the fact that two biggest hacks of all time have happened to Yahoo have been announced with Yahoo since Verizon made that offer.
[Gorani:] It's a little scary that it took three years for us to learn about it.
[Burke:] Three years.
[Gorani:] Thanks very much as always. Samuel Burke with us on this Thursday. Now, the U.S. Transportation Security Administration, the TSA, Samuel, has what appears to be a depressing Instagram post. An abandoned giant teddy bear meant to warn travelers about oversized luggage. Look at him. They said, quote, "He was abandoned by his owners at LAX" after the airline and TSA determined that he was just too big to be screened as carry-on luggage. But now, the TSA says the traveler was not a despondent child but a YouTube prankster, and it was stunt to see if he could get the giant bear on the plane. They say the prankster bought a ticket for the bar.
[Burke:] As if travelling could get any worse with that depressed bear by the trash can when you're about to be stripped searched at the airport.
[Gorani:] All right. Now you know. Now you know, don't travel with a giant bear. Samuel, thanks. "QUEST MEANS BUSINESS" is next. I'm Hala Gorani. I'll see you tomorrow.