At least 500 million Yahoo accounts have been hacked in a massive data breach, the company confirmed today.
The hack itself, believed to be the biggest in history that the public knows about, took place in 2014.
Yahoo Inc said they believed it was by a ‘state-sponsored actor’ – in other words, they think the hackers had links to a country’s government, although they did not
speculate on which.
The data stolen may have included names, email addresses, telephone numbers, dates of birth and scrambled passwords.
However, it may not have included unprotected passwords, payment card data or bank account information, the company said.
Criminals have been selling people’s personal information obtained in the breach, technology news site Motherboard reported.
Prolific cyber criminal ‘Peace’ was offering data he claimed was from around 200 million Yahoo users.
He was asking three bitcoin for the information – around £1,400 at the time, Motherboard said.
They published their report a week after Verizon announced it would buy Yahoo – a sale which is still pending.
Yahoo said it was working with law enforcement to find out what happened and who was responsible.
This is a breaking story and will be updated.