Yahoo data breach email - is it legitimate?

[RW]

I received an email from Square concerning a data breach regarding passwords, security questions and account. Is this a legitimate concern ar an attempt at phishing? 

[VanKalkerFarms]

Yahoo did announce a data breach in the past few days that could affect some Square users, but Square itself hasn't had a breach. It is likely that the email you received was phishing. Check out this link for more information about phishing emails. If you're ever concerned about an email you receive not being legitimate, you can also go directly to the website (do not click on the link in the suspicious email) and see if there is additional information there. https://squareup.com/help/us/en/article/5571-recognize-and-report-phishing-scams

[Caty · Accepted solution]

Hi @RW! The email sent on Friday was a legitimate notification sent by our team to Square sellers who have a Yahoo email address tied to their account. (You can always tell if an email truly comes from Square because the sender email address will always end with "squareup.com".) It was not a phishing attempt.

As @VanKalkerFarms mentioned, Yahoo recently announced a major data breach where millions of Yahoo account details were exposed. Though we have no reason to believe that any Square accounts have been affected as result of Yahoo's breach, we opted to reach out to all sellers who have a Yahoo email address on file with us with details on how they can add additional security to their Square account. I reposted those tips here so that other sellers can have access to them.

Hope that helps to clarify, and apologies for any confusion! Let us know if you have any additional questions.