According to news reports today, Yahoo suffered a major breach in 2014 that may have exposed as many as 500 million accounts to exploitation. A statement from the companies CISO Bob Lord reads in part "We have confirmed that a copy of certain user account information was stolen from the company’s network in late 2014 by what it believes is a state-sponsored actor". The investigation into the breach is ongoing and the company is working with law enforcement agencies to fully discover the extent of the damage. It is believed that while the breach occurred in 2014, it was only discovered this past summer when bundles of Yahoo user accounts were offered for sale on the Internet. The information includes email addresses, user names, passwords, dates of birth and telephone numbers.
Yahoo is taking action to protect its customers but suggests that users change their passwords, use caution with emails, and check accounts for activity that may seem suspicious. If the reports are accurate, the Yahoo breach will have the dubious record as the largest data breach of all time....to date.