Yahoo believes a state-sponsored actor breached its network in late 2014 and may have stole names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers from at least 500 million accounts.
Yahoo said its ongoing investigation suggests that stolen information did not include unprotected passwords, payment card data, or bank account information.
