Yahoo Confirms Breach of Over 1 Billion Accounts Linked to State-Sponsored Actors

Yahoo disclosed that a breach dating to August 2013 compromised over one billion user accounts, believed to be carried out by state-sponsored actors who forged authentication cookies to access accounts without passwords. Exposed data may include names, emails, phone numbers, dates of birth and MD5-hashed passwords; Yahoo is invalidating cookies, forcing password resets, notifying users, and working with forensic investigators.