Yahoo homepage
Yahoo said data from 500m users was taken by hackers in 2014. Credit: PA
At least 500 million Yahoo users have had their personal information stolen by hackers over the past two years, the technology company has confirmed.
Yahoo said account information was stolen from the network in late 2014 during a security breach which the company believes was carried out by a "state-sponsored actor".
In a statement the firm said personal information was taken including "names, email addresses, telephone numbers and dates of birth" - but did not include unprotected passwords, bank account information or payment card data.
We have confirmed, based on a recent investigation, that a copy of certain user account information was stolen from our network in late 2014 by what we believe is a state-sponsored actor.
The account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers.
The ongoing investigation suggests that stolen information did not include unprotected passwords, payment card data, or bank account information; payment card data and bank account information are not stored in the system that the investigation has found to be affected
– YAHOO STATEMENT