Yahoo has confirmed a 2014 hack by what it says were “state sponsored” actors that has compromised the information of at least 500 million users. Names, email addresses, personal demographic information, hashed passwords and telephone numbers were listed as among the user data potentially acquired in the hack, though the company has said unprotected passwords, credit card or bank information may not have been compromised.
In a statement, Yahoo, said it is cooperating with the ongoing investigation by law enforcement, and that “the investigation has found no evidence that the state-sponsored actor is currently in Yahoo’s network.” The company also says that affected users will be notified and that action has been taken to secure affected account.
The hack, said to have occurred in late 2014, may be related to activities by a hacker operating under the name “Peace,” who in August, 2016 offered to sell 200 million Yahoo usernames and passwords on various online forums.
The news comes as Yahoo is in the process of being acquired by Verizon, which agreed in July to buy the ailing internet giant in a $4.83 billion deal. How the hack will affect that acquisition is as yet not known. “We will evaluate as the investigation continues through the lens of overall Verizon interests,” said Verizon in a statement. “Until then, we are not in position to further comment.”