Yahoo has confirmed an historically huge data breach, which compromised the account information of more than 500m account holders.
The Verizon-owned firm says the hack, which may be the largest ever recorded, occurred in 2014 and was the result of a “state-sponsored” attack.
The company says usernames, hashed passwords, phone numbers and dates of birth were stolen. Financial information is believed to be unaffected.
In a statement posted on its investor relations site, the firm wrote: “Yahoo believes that information associated with at least 500 million user accounts was stolen and the investigation has found no evidence that the state-sponsored actor is currently in Yahoo's network. Yahoo is working closely with law enforcement on this matter.”
The company says it is notifying users who may be affected by the breach and says the hackers no longer have access to its portals.
Today’s statement comes following reports Yahoo had fallen victim to hackers back in August.
When news emerged of a hacker seeking to sell Yahoo account holders information online for pittance, the company neither confirmed nor denied the breach.
An earlier report from Re/Code on Thursday suggested the US government may seek to investigate the situation. With allegations of state-sponsored cyber crime on such a huge scale, this seems far more likely.
Have you been affected by the breach? Share your thoughts below.
Watch The Refresh: The best tech gossip and reviews every week