Yahoo Discloses Two-Year-Old Data Breach of 500 Million Users

Getty Images
Carnival whack-a-mole.

After a report this morning by tech news site Recode, Yahoo has disclosed that the data of 500 million users was breached in 2014 "by a state actor," according to The New York Times. The hack, which came to light in August and was claimed by a cybercriminal named Peace, is unwelcome news to the company, currently in the process of selling its core assets to Verizon.

The breach allegedly involved usernames and passwords, along with birth dates and backup email addresses.

In Yahoo’s case, Peace has claimed that he was going to sell the data trove for 3 bitcoin, which amounts to $1,860. A report on the hack was published by Vice's Motherboard only a week after Verizon announced it was buying Yahoo for $4.8 billion.

Verizon Acquires Yahoo for $4.83 Billion

Yahoo has said little about the hack, other than admitting they were "aware" of the situation. The company has yet to inform users of any breach or urge them to reset their passwords (just go ahead and do that).


The Biz premium subscriber content has moved to

To simplify subscriber access, we have temporarily disabled the password requirement.