Yahoo said data from 500m users was taken by hackers in 2014. Credit: PA
At least 500 million Yahoo users have had their personal information
stolen by hackers over the past two years, the technology company has
Yahoo said account information was stolen from the network in late 2014
during a security breach which the company believes was carried out by
a "state-sponsored actor".
In a statement the firm said personal information was taken including
"names, email addresses, telephone numbers and dates of birth" - but
did not include unprotected passwords, bank account information or
payment card data.
We have confirmed, based on a recent investigation, that a copy of
certain user account information was stolen from our network in late
2014 by what we believe is a state-sponsored actor.
The account information may have included names, email addresses,
telephone numbers, dates of birth, hashed passwords (the vast majority
with bcrypt) and, in some cases, encrypted or unencrypted security
questions and answers.
The ongoing investigation suggests that stolen information did not
include unprotected passwords, payment card data, or bank account
information; payment card data and bank account information are not
stored in the system that the investigation has found to be affected
– YAHOO STATEMENT