Yesterday, we reported that Yahoo was expected to confirm a massive data leak!
The company has officially admitted that data from at least 500 million user accounts has been stolen,making it one of the largest security breaches ever.
The company says that the user account information was stolen from the company’s network “in late 2014 by what it believes is a state-sponsored actor,” and could include personal credentials such names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and even security questions and answers.
One the safe side, unprotected passwords, payment card data and bank account information were not included in the stolen information, since that info isn’t stored in the affected system.
Yahoo has revealed that it is working with law enforcement to further investigate the matter.