Yahoo has confirmed that around 500 million accounts were stolen in a 2014 security breach. Stolen account information includes:
- Hashed passwords
- Dates of birth
- And possibly security questions and answers
The company is working with law enforcement in an on-going investigation but so far it appears the breach was a state-sponsored activity. Bottom line: if you have a Yahoo account and you haven’t changed your password in while, now’s a great time to do so! In addition you’ll need to to the same for any sites where you might have been using the same credentials (and security questions / answers). Always use different passwords and security question information for every site you have an account with.
Additional info: Wall Street Journal