Yahoo! Inc. disclosed a data breach affecting over 500 million user accounts. Unauthorized third parties stole data in August 2013, including names, emails, DOBs, hashed passwords, and security questions. A separate incident involved state-sponsored actors forging cookies in 2015-2016. Yahoo worked with law enforcement, forced password resets, invalidated security questions and forged cookies, and hardened systems. The incident is distinct from a September 2016 disclosure.
Affected (this filing): 500,000,000