Yahoo Says at Least 500 Million Accounts Breached in Attack

By Brian Womack and Jordan Robertson, Bloomberg News

Yahoo! Inc. said the personal information of at least 500 million users was stolen in an attack on its accounts in 2014, exposing half of its roughly 1 billion users ahead of Verizon Communications Inc.’s planned acquisition of the web portal’s assets.

The attacker was a “state-sponsored actor,” and stolen information may include names, e-mail addresses, phone numbers, dates of birth, encrypted passwords and possibly security questions and answers, Yahoo said Thursday in a statement. The continuing investigation doesn’t indicate the theft of payment data or bank account information, or unprotected passwords, ...