TIME Security

Yahoo Confirms Massive Data Breach Affecting At Least 500 Million Accounts

By what the company believes was a "state-sponsored" actor

Yahoo Inc said on Thursday information associated with at least 500 million user accounts was stolen from its network in 2014 by what it believed was a “state-sponsored actor.”

The data stolen may have included names, email addresses, telephone numbers, dates of birth and hashed passwords but may not have included unprotected passwords, payment card data or bank account information, the company said.

“The investigation has found no evidence that the state-sponsored actor is currently in Yahoo’s network,” the company said.

Yahoo said it was working with law enforcement on the matter.

It was not clear how this disclosure might affect Yahoo’s plan to sell its email service and other core internet properties to Verizon Communications Inc.

Verizon said in July it would buy Yahoo’s core internet properties for $4.83 billion.

Verizon said on Thursday it was notified of the breach in the last two days.

“We will evaluate as the investigation continues through the lens of overall Verizon interests … Until then, we are not in position to further comment,” the company said.

(Reporting by Aishwarya Venugopal in Bengaluru; Editing by Sriraj Kalluvila)

Your browser is out of date. Please update your browser at http://update.microsoft.com


YOU BROKE TIME.COM!

Dear TIME Reader,

As a regular visitor to TIME.com, we are sure you enjoy all the great journalism created by our editors and reporters. Great journalism has great value, and it costs money to make it. One of the main ways we cover our costs is through advertising.

The use of software that blocks ads limits our ability to provide you with the journalism you enjoy. Consider turning your Ad Blocker off so that we can continue to provide the world class journalism you have become accustomed to.

The TIME Team