(CNBC) Yahoo confirmed on Thursday that information associated with at least 500 million user accounts was stolen.
An investigation by Yahoo confirmed that a data breach in late 2014 revealed information that may have included names, email addresses, telephone numbers, dates of birth, and some passwords and security questions and answers. That information may now be in the hands of a state-sponsored actor that no longer appears to be in the Yahoo network, the company said.
Payment card data, bank account information and certain passwords were not stolen, it said in a statement. Yahoo is advising potentially affected users to change their passwords and invalidate their security questions and answers.
Advertisement - story continues below
